last executing test programs: 4m38.784391202s ago: executing program 2 (id=10311): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1002}) ioctl$TUNSETIFINDEX(r0, 0x400454da, 0x0) 4m36.811843649s ago: executing program 2 (id=10326): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000040)="4c00000011002914000e00020000170002000400200000", 0x17) 4m33.845106155s ago: executing program 2 (id=10331): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4c02}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 4m25.570754219s ago: executing program 2 (id=10341): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1401000013000500000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0000000000000000f4001a800600000002000000e800058024000180080001000100070008000200000000000800030000000000080004"], 0x114}}, 0x0) 4m24.93948495s ago: executing program 2 (id=10344): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="050000000300000004000000ff"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m23.422278181s ago: executing program 2 (id=10347): unshare(0x60000600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @loopback}}) 4m6.445659476s ago: executing program 32 (id=10347): unshare(0x60000600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8917, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e24, @loopback}}) 59.515813224s ago: executing program 1 (id=11118): socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271f, 0x0, &(0x7f0000000000)) 59.334890183s ago: executing program 1 (id=11121): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newlink={0x4c, 0x10, 0x401, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r1}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x2001c004) 56.887083304s ago: executing program 1 (id=11141): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000005000128009000100766c616e000000004000028006000100fe0f000004000480280003800c00420040000000060000000c003900ff04000000000000d8fd010006000000090000000600050088a8000008000a00", @ANYRES32=r0, @ANYBLOB="08000500", @ANYRES64=r0], 0x8c}, 0x1, 0xba01, 0x0, 0x400c085}, 0x0) 55.265765467s ago: executing program 4 (id=11156): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x1c0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b4000000000000007910900000000000790040000000000095"], &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x4c, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r2}, 0x94) 54.923580896s ago: executing program 4 (id=11159): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f00000000c0)={0x1, 0x2}, 0x8) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000600)=0x5d6c, 0x4) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{&(0x7f0000000180)={0xa, 0x4e21, 0x4, @mcast2}, 0x1c, 0x0}}], 0xd, 0x4000800) 54.439365866s ago: executing program 4 (id=11166): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x2dffb000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x13, r0, 0x82316000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bcc8320026"], &(0x7f0000001f80)=""/198, 0x26, 0xc6, 0xa}, 0x28) 54.216440725s ago: executing program 4 (id=11168): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0x0, 0x700}, 0x2c) 54.211444057s ago: executing program 5 (id=11169): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000000)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0xd}}]}, @qdisc_kind_options=@q_plug={{0x9}, {0x4}}]}, 0x60}}, 0x0) 53.840326249s ago: executing program 4 (id=11172): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@delchain={0x24, 0x65, 0x1, 0x70bd2e, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x4c898}, 0x20004804) 53.6725504s ago: executing program 5 (id=11174): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000240)=@newqdisc={0x7c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4c, 0x2, {{0x80000001, 0x0, 0x6c, 0x0, 0x0, 0xbffffffe}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x16, 0xcc, 0x0, 0x8008, 0x7ffffffffffffffc}}, @TCA_NETEM_LOSS={0x4}]}}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x24040080}, 0x0) 53.67223153s ago: executing program 0 (id=11175): r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1}, 0x9}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0}, 0x4800) 53.476058432s ago: executing program 3 (id=11176): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newqdisc={0x24, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000200)={0x3, &(0x7f0000000240)=[{0x20, 0x7f, 0x6, 0xfffff00c}, {0x28, 0x0, 0x1, 0x5ae9}, {0x6, 0x9, 0xa1, 0x1000}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) 53.383435965s ago: executing program 5 (id=11177): r0 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r0, &(0x7f0000000040)={&(0x7f0000000080)=@id={0x1e, 0x3, 0x3, {0x4e24}}, 0x10, 0x0}, 0x20001) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000a40)='ns/net\x00') pselect6(0x40, &(0x7f0000000400), 0x0, &(0x7f0000000440)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) 53.302120238s ago: executing program 0 (id=11178): r0 = epoll_create1(0x80000) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000001040)={0x80000002}) 53.085692619s ago: executing program 3 (id=11179): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x42, 0x2}, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) 53.023868217s ago: executing program 1 (id=11180): bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000fdfdfff67a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040000010000400404000001000000b7050000050000006a0a00fe00000000850000000a000000b70000000000000095000000000000009cc6b3fcd62c061c6238975d43a4505f80e39c9f3c530cf08e467b592f868ee3b0a435df0a0e8c1bf176db2a6b2feb4b77d3d5707bfd2d84aaa3b1d4e984c46ea7e2b347a36f5662403e1b2be4284322a4908a0d411a9872971c7c56f0979bd10b97163c066d0e196bf02f46c7953ab1abdaf9de9ca3c00cb9bf4e418d076feafa22f0610a70f2bdf4000200000066b60d00b0c2c1254f0963f63223b7b80197aa3161f45346b1000000070000000000000099f6609876b5887437a172ebc02a740694298b79dc194e533583412dff048fc21f28bdd3e26a1a8a0481e9f0da43bb6ca66e2f55a9ff19ffcafe3e64be033c9d2f972cc93c1c13caec04a367c24a9fb6a6991ddb737d527d6acb15426415b6e8b14f822e86067a5e991c3b404984dfa2c6e94bd0339454c13ad3c328a182c15dc760a3000000005dc2ed0e0b29e98fa883c71949a34d84030323e3d54f45b29d27643453ad9211e3550ee5520211d9370175133f260c6882a146880b9387f1beb5418618bc83a3becf9bb57da7ba8b913c685fc6700848dc6665d73248c1f74e08ad04ce905faf32706e0000249a028044ede964362cfb7830a246c3b2f60000fc4deb8eda1368b0960b8d69bd99c64893d44f962524429dc058528e7e541c903869d96989b9a986620cb2c95c83f2a082c52764f49e51188f9418b01bcd8ae164acdac95318ec8b2c6feacdcf4b528e5e582160ed048c46e1dccca05bfa1d67c83795eae2d31968c055d325a9c794ef88b30c2de4a274878b73c05ffa88b7033be648b12bb1fee58958d6a6f31bfe568215dfbde59dad00008a73b40f09cf018cd496b36050d70c28f76749262e33e16429a6da35ceb1a989de81c3f8b8bc3a4763948a1cbc10348ef2ac3781b847611fcb0a26acafdd6d9ab05865fcf7c493d8f8cd344a1d470ca0d6f16ab0293774b5509fb0e7113936d59d5a60dbd84a938476adeebab9ff44f531bb81c53f16d80f51006cbc71570a5e272b223425e09dc6b6cc1fbc455a64fd449284f71761092a0302000000000000008a05d36fd9b814b4292745418c92d944763a4bf5e138d810e29a31f08f7dea7762d28484e15dc4320e4f85c16a8fbffadf8214d6d24cabe17ad4135d8872935ce0e6a468fd20fa4461d1d600234feac6eb4f046f2acc1b0efb4438abddcabb4e4e72a450aab72b589bec83bbb688e659fb426cb43d0ee993516fd4e867232cde69b6ffad447dcd92e0ef8234ff850ec3948dd1fa7afb77d951fe4abf618121b7894c1044ef221973432ccc7e62b151eb898a01010a7ec5acd0a5dcb2de443880c8a682515d1da9a3048744acb44384d1591df789883c0560495cb0cb32283529926d25e5c7f4815237c3aa356217738898a16ba603439f6eaad8e70b"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x602, r0}, 0x38) 52.947743112s ago: executing program 5 (id=11181): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000900)={r2, 0x1000, 0x1, 'S'}, 0x9) 52.947493454s ago: executing program 0 (id=11182): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="010000000300000000"], 0x48) unshare(0x2c020400) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000600)={r1, 0x0, 0x0, 0x4}, 0x20) 52.817752366s ago: executing program 4 (id=11183): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_pid(r2, &(0x7f0000000000), 0xffffff98) splice(r1, 0x0, r0, 0x0, 0x100000006, 0x0) 52.770818158s ago: executing program 3 (id=11184): r0 = epoll_create1(0x0) r1 = epoll_create(0x1200000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x40000001}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000240)={0x8002008}) 52.636308955s ago: executing program 0 (id=11185): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_bcm(r0, &(0x7f0000000040)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="05000000800d00"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000004001"], 0x80}}, 0x0) 52.542982172s ago: executing program 1 (id=11186): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b80)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x0, 0x0, 0x1a, 0x0, 0x3}}, @TCA_CHOKE_STAB={0xfffffff3, 0x2, "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"}]}}]}, 0x154}}, 0x20000000) 52.527707764s ago: executing program 5 (id=11187): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000ac0)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x800) recvmmsg$unix(r1, &(0x7f0000002bc0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{0x0}, {&(0x7f0000000200)=""/215, 0xd7}], 0x2}}], 0x1, 0x1, 0x0) 52.449876824s ago: executing program 3 (id=11188): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0x13, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000fcffffff1840"], &(0x7f0000000000)='syzkaller\x00', 0xf, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x420000}, 0x94) 52.260542459s ago: executing program 5 (id=11189): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000002c0)=0x2000041) pwritev(r0, &(0x7f0000000040)=[{&(0x7f0000000340)="80fd020000400b45605606f244c1a5033a47ec8573152258a4c11a6d8a415b22969eed57b80d1538667d5dcddc77f0845085f70557eb09fe6552323abb7bfe3252b7", 0x42}], 0x1, 0x0, 0x0) 52.058692335s ago: executing program 0 (id=11190): setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000000)={0x40, 0x2, 0x6, 0x7, 0x7f, 0xf, 0x9, 0x8, 0xf, 0xc5, 0xf, 0x8, 0x8, 0x3}, 0xe) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0xf, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000087000000000000000600008018", @ANYRES32], 0x0, 0xa, 0x0, 0x0, 0x41000, 0x4d}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000d0000000000010005000093737b8662ff010000006868f8ff0000000018110000", @ANYBLOB, @ANYBLOB="e100000000000000b7080000080000007b8af873e875f522ff00000000bfa200000000000007020000f8ffffffb703000008080000000000f9ebe0f47eae1eaf17183171335700000000000001f94000090000009500"/103, @ANYRES8, @ANYRES8], &(0x7f0000000200)='GPL\x00', 0x4, 0x1000, &(0x7f0000001ac0)=""/4105, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0xa}, 0x2, 0x10, &(0x7f00000003c0)={0x0, 0xf, 0x999, 0x3ff}, 0x10, 0x0, 0x0, 0x3f55ca97280b0a2a, &(0x7f0000000000), 0x0, 0x10, 0x6}, 0x95) 52.051316471s ago: executing program 3 (id=11191): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x9102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) 51.951720071s ago: executing program 1 (id=11192): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0xc0041, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90) write$tun(r0, &(0x7f00000002c0)={@void, @void, @ipv6=@dccp_packet={0xf, 0x6, "38b177", 0x121, 0x21, 0x0, @mcast1, @private2, {[@srh={0x6, 0x2, 0x4, 0x1, 0x0, 0x18, 0x6, [@rand_addr=' \x01\x00']}, @hopopts={0x2e}, @dstopts={0x6, 0x4, '\x00', [@ra={0x5, 0x2, 0xc8f3}, @jumbo={0xc2, 0x4, 0x80000000}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x8}, @enc_lim={0x4, 0x1, 0x6}]}, @hopopts={0x67, 0x5, '\x00', [@hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x4}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @fragment={0x2f, 0x0, 0x7f, 0x1, 0x0, 0x4, 0x64}], {{0x4e22, 0x4e21, 0x4, 0x1, 0x6, 0x0, 0x0, 0x4, 0x7, "6de17e", 0x0, "00f600"}, "0d1198143f7e5b3152ca9da9dabff56658b4d3079e6cce1ab98662a450e0fc2b6c032668aab51dcde58d8c338f0123b1e2dd081fdf862d3da4e2c8cb1c59201be121b3145ce2acaabfa3ffde35ef4872f995ab49ad6b21ac3d56f9e348d77bf81175f9a9d6814c099b629902e7e91031fc7213c5f8d991ad77cd2c7005b05917ca"}}}}, 0x149) 51.749152903s ago: executing program 0 (id=11193): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) 51.743694973s ago: executing program 3 (id=11194): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000840)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000880)=0x5, 0x4) sendmsg$inet6(r0, &(0x7f0000000900)={&(0x7f0000000940)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x18, 0x0, 0x0, &(0x7f0000000980)=[@dstopts_2292={{0x18, 0x29, 0x4, {0x5e}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x3a, 0x10}}}], 0x30}, 0xc4) 0s ago: executing program 33 (id=11193): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000840)=@filter={'filter\x00', 0xe, 0x4, 0x280, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@loopback, 'lo\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000640)={0x2, 0x4e23, @local}, 0x10) kernel console output (not intermixed with test programs): 34421][T16561] 8021q: adding VLAN 0 to HW filter on device bond2 [ 319.653720][T16561] 8021q: adding VLAN 0 to HW filter on device bond3 [ 319.663877][T16561] 8021q: adding VLAN 0 to HW filter on device bond4 [ 319.685976][ T5774] lo speed is unknown, defaulting to 1000 [ 319.686017][ T5774] syz0: Port: 1 Link ACTIVE [ 319.686348][ T5774] lo speed is unknown, defaulting to 1000 [ 319.838406][T16575] veth2: entered allmulticast mode [ 319.878329][ T252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.916038][ T252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.916089][ T252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.916125][ T252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.069958][T16593] netlink: 164 bytes leftover after parsing attributes in process `syz.2.5150'. [ 320.070109][T16593] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5150'. [ 320.087159][T16591] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.340085][T16607] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5155'. [ 320.563601][T16621] ip6gre1: entered promiscuous mode [ 320.736401][T16634] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 320.888358][T16639] openvswitch: netlink: Key type 16131 is out of range max 32 [ 321.055132][T16650] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 321.255270][T16659] netlink: 'syz.0.5179': attribute type 21 has an invalid length. [ 322.307591][T16713] Cannot find add_set index 3 as target [ 322.547768][T16725] netlink: 'syz.0.5213': attribute type 6 has an invalid length. [ 323.216475][T16754] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5227'. [ 323.576609][T16769] netlink: 'syz.0.5234': attribute type 1 has an invalid length. [ 323.576634][T16769] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5234'. [ 323.670368][T16775] x_tables: duplicate entry at hook 4 [ 324.201916][T16794] veth5: entered allmulticast mode [ 324.410389][T16806] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5253'. [ 324.518099][T16813] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5256'. [ 324.521164][T16816] netlink: 'syz.0.5258': attribute type 11 has an invalid length. [ 324.521186][T16816] netlink: 'syz.0.5258': attribute type 4 has an invalid length. [ 324.521200][T16816] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5258'. [ 324.611927][T16818] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5261'. [ 324.611958][T16818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5261'. [ 324.632778][T16821] netlink: 596 bytes leftover after parsing attributes in process `syz.1.5259'. [ 324.725171][T16818] bond3: invalid ARP target 0.0.0.0 specified for addition [ 324.725202][T16818] bond3: option arp_ip_target: invalid value (0) [ 324.725218][T16818] bond3: Removing last arp target with arp_interval on [ 324.751174][T16818] bond3 (unregistering): Released all slaves [ 324.953964][T16833] xt_CT: No such helper "netbios-ns" [ 325.351694][T16861] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5280'. [ 325.382258][T16862] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5277'. [ 325.748607][T16886] netlink: 'syz.0.5291': attribute type 1 has an invalid length. [ 325.965810][T16898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5296'. [ 325.965839][T16898] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5296'. [ 326.101898][T16905] openvswitch: netlink: IPv4 tunnel dst address is zero [ 326.284833][T16915] sctp: [Deprecated]: syz.3.5304 (pid 16915) Use of int in maxseg socket option. [ 326.284833][T16915] Use struct sctp_assoc_value instead [ 327.384310][T16982] netlink: 'syz.0.5333': attribute type 1 has an invalid length. [ 328.191166][T17024] xt_hashlimit: max too large, truncated to 1048576 [ 328.654545][T17046] xt_policy: too many policy elements [ 328.922977][T17058] vti0: entered promiscuous mode [ 329.276346][T17078] ebt_among: dst integrity fail: 102 [ 329.530861][T17097] __nla_validate_parse: 6 callbacks suppressed [ 329.530884][T17097] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5392'. [ 329.530904][T17097] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5392'. [ 329.891486][T17119] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5403'. [ 329.898049][T17121] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5402'. [ 330.266121][T17136] netlink: 'syz.1.5412': attribute type 1 has an invalid length. [ 330.266149][T17136] netlink: 236 bytes leftover after parsing attributes in process `syz.1.5412'. [ 330.661623][T17158] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 331.084671][T17183] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 331.230185][T17192] @ÿ: left promiscuous mode [ 331.232318][T17192] @ÿ: entered promiscuous mode [ 331.277332][T17192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 331.672326][T17216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5448'. [ 331.817550][T17222] x_tables: ip_tables: RATEEST.0 target: invalid size 32 (kernel) != (user) 0 [ 331.877715][T17228] netlink: 'syz.1.5454': attribute type 266 has an invalid length. [ 332.628876][T17263] netlink: 'syz.0.5473': attribute type 1 has an invalid length. [ 332.628902][T17263] netlink: 244 bytes leftover after parsing attributes in process `syz.0.5473'. [ 332.643756][T17266] netlink: 100 bytes leftover after parsing attributes in process `syz.4.5475'. [ 332.927025][T17237] infiniband syz2: set active [ 332.927049][T17237] infiniband syz2: added bond_slave_0 [ 333.008438][T17237] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 333.008482][T17237] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 333.008518][T17237] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 333.088080][T17281] x_tables: eb_tables: u32.0 match: invalid size 1984 (kernel) != (user) 2032 [ 333.164143][T17237] RDS/IB: syz2: added [ 333.164203][T17237] smc: adding ib device syz2 with port count 1 [ 333.164221][T17237] smc: ib device syz2 port 1 has no pnetid [ 333.182067][T17289] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5483'. [ 333.290694][T17293] netlink: 'syz.4.5484': attribute type 1 has an invalid length. [ 333.290719][T17293] netlink: 'syz.4.5484': attribute type 12 has an invalid length. [ 333.290733][T17293] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5484'. [ 333.445118][T17299] ip6tnl3: entered promiscuous mode [ 335.087764][T17358] __nla_validate_parse: 2 callbacks suppressed [ 335.087789][T17358] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5515'. [ 335.087826][T17358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 335.631388][T17378] ieee802154 phy1 wpan1: encryption failed: -22 [ 336.430665][T17415] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5544'. [ 336.526016][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5546'. [ 336.526048][T17421] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5546'. [ 336.793893][T17439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5553'. [ 337.301755][T17469] ip_tables: iptables: counters copy to user failed while replacing table [ 337.659314][T17491] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5578'. [ 337.960246][T17510] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5586'. [ 338.171434][T17521] netlink: 'syz.1.5595': attribute type 2 has an invalid length. [ 338.199951][T17521] !: entered promiscuous mode [ 338.620324][T17547] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5606'. [ 339.487288][T17600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 339.669064][T17612] netlink: 'syz.3.5636': attribute type 1 has an invalid length. [ 339.748379][T17614] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5638'. [ 339.810879][T17620] openvswitch: netlink: Geneve opt len 5 is not a multiple of 4. [ 339.881546][T17624] xt_TCPMSS: Only works on TCP SYN packets [ 340.182223][T17645] SET target dimension over the limit! [ 340.486064][T17667] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5664'. [ 340.486101][T17667] netlink: 'syz.2.5664': attribute type 3 has an invalid length. [ 340.785308][T17683] netlink: 'syz.4.5673': attribute type 1 has an invalid length. [ 340.785334][T17683] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5673'. [ 340.997769][T17694] : entered promiscuous mode [ 341.269664][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5688'. [ 341.269745][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5688'. [ 341.762614][T17739] netlink: 'syz.2.5702': attribute type 61 has an invalid length. [ 341.762643][T17739] netlink: 'syz.2.5702': attribute type 268 has an invalid length. [ 341.789597][T17741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 342.663626][T17789] netlink: Conntrack attr has 8 unknown bytes [ 342.823687][T17796] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5726'. [ 343.143224][T17805] netlink: 'syz.0.5730': attribute type 21 has an invalid length. [ 343.611670][T17824] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5740'. [ 343.685804][T17827] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5741'. [ 344.094622][T17841] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 344.112898][T17841] bond3 (unregistering): Released all slaves [ 344.230369][T17851] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5752'. [ 344.985228][T17885] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 345.073207][T17890] ieee802154 phy1 wpan1: encryption failed: -22 [ 345.231459][T17898] netlink: 'syz.0.5775': attribute type 4 has an invalid length. [ 345.341737][T17905] xt_cluster: node mask cannot exceed total number of nodes [ 345.445025][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5784'. [ 345.448043][T17910] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5784'. [ 345.448065][T17910] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 345.685732][T17925] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5791'. [ 345.685840][T17925] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 345.737481][T17929] xt_bpf: check failed: parse error [ 346.217073][T17953] 8021q: adding VLAN 0 to HW filter on device .` [ 346.223189][T17961] netlink: 3 bytes leftover after parsing attributes in process `syz.0.5806'. [ 346.224074][T17953] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.238173][T17953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.351604][T17953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 346.363643][T17953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.380180][T17953] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 346.380208][T17953] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 346.411312][T17953] veth1_vlan: left promiscuous mode [ 346.412938][T17953] veth0_vlan: left promiscuous mode [ 346.415125][T17953] veth0_vlan: entered promiscuous mode [ 346.436055][T17953] veth1_vlan: entered promiscuous mode [ 346.453899][T17953] veth0_macvtap: left promiscuous mode [ 346.461707][T17953] veth0_macvtap: entered promiscuous mode [ 346.480469][T17953] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 346.482644][T17953] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 346.501295][T17953] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 346.502755][T17953] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 346.533807][T17953] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 346.555019][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 346.555145][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 346.564367][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 346.564472][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 346.668316][T17963] bridge6: entered promiscuous mode [ 346.685999][ T251] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.686059][ T251] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.686094][ T251] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.686128][ T251] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.912128][T17980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5818'. [ 346.912164][T17980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5818'. [ 346.962734][T17986] netlink: 'syz.3.5817': attribute type 2 has an invalid length. [ 346.990530][T17987] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5816'. [ 347.253972][T18001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5827'. [ 347.327979][T18007] netlink: 'syz.0.5829': attribute type 1 has an invalid length. [ 348.290390][T18042] bridge0: port 1(00ªX¹¦Dö») entered blocking state [ 348.290537][T18042] bridge0: port 1(00ªX¹¦Dö») entered forwarding state [ 348.318290][T18042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 348.322059][T18042] 8021q: adding VLAN 0 to HW filter on device team0 [ 348.354396][T18042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.393440][T18051] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5850'. [ 348.393478][T18051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5850'. [ 348.460789][T18042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.460818][T18042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.491974][T18042] veth1_vlan: left promiscuous mode [ 348.494161][T18042] veth0_vlan: left promiscuous mode [ 348.509313][T18042] veth0_vlan: entered promiscuous mode [ 348.522777][T18042] veth1_vlan: entered promiscuous mode [ 348.547059][T18042] veth0_macvtap: entered promiscuous mode [ 348.548348][T18042] veth1_macvtap: entered promiscuous mode [ 348.568508][T18042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 348.569804][T18042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 348.570970][T18042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 348.608582][T18042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 348.609833][T18042] A link change request failed with some changes committed already. Interface geneve2 may have been left with an inconsistent configuration, please check. [ 348.732988][T18063] netlink: 'syz.2.5856': attribute type 1 has an invalid length. [ 348.733719][T18051] bridge7: entered promiscuous mode [ 348.733739][T18051] bridge7: entered allmulticast mode [ 348.747429][ T3409] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.766064][ T251] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.766114][ T251] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.766148][ T251] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.984852][T18067] netlink: 'syz.4.5860': attribute type 2 has an invalid length. [ 349.002152][T18067] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 349.513362][T18098] netlink: 'syz.3.5872': attribute type 11 has an invalid length. [ 349.513387][T18098] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5872'. [ 349.769157][T18111] netlink: 'syz.3.5878': attribute type 61 has an invalid length. [ 349.835646][T18117] netlink: 'syz.2.5881': attribute type 1 has an invalid length. [ 349.847062][T18071] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 350.002050][T18122] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5883'. [ 350.002081][T18122] netlink: 'syz.3.5883': attribute type 1 has an invalid length. [ 350.357314][T18144] netlink: 'syz.3.5895': attribute type 1 has an invalid length. [ 350.357340][T18144] netlink: 'syz.3.5895': attribute type 268 has an invalid length. [ 350.485321][T18153] netlink: 'syz.1.5898': attribute type 1 has an invalid length. [ 351.056011][ T5641] Bluetooth: hci0: command 0x0406 tx timeout [ 351.795306][T18220] __nla_validate_parse: 2 callbacks suppressed [ 351.795329][T18220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5929'. [ 351.795352][T18220] openvswitch: netlink: IP tunnel dst address not specified [ 351.987564][T18223] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5932'. [ 352.400270][T18246] netlink: 'syz.2.5943': attribute type 1 has an invalid length. [ 352.806579][T18272] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 352.994168][T18285] netlink: 'syz.4.5961': attribute type 70 has an invalid length. [ 353.383854][T18306] netlink: 'syz.3.5972': attribute type 10 has an invalid length. [ 353.507275][T18313] netlink: 'syz.1.5975': attribute type 32 has an invalid length. [ 353.711099][T18323] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5980'. [ 353.711124][T18323] tc_dump_action: action bad kind [ 354.086207][T18345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5994'. [ 354.086232][T18345] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5994'. [ 354.159232][T18350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5992'. [ 354.159261][T18350] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5992'. [ 356.293997][T18441] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 356.490642][T18451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6043'. [ 356.900274][T18467] xt_TCPMSS: Only works on TCP SYN packets [ 357.180340][T18482] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6059'. [ 357.210827][T18486] netlink: 844 bytes leftover after parsing attributes in process `syz.1.6061'. [ 357.210859][T18486] netlink: 844 bytes leftover after parsing attributes in process `syz.1.6061'. [ 357.352315][T18491] bond3: entered promiscuous mode [ 357.352391][T18491] bond3: entered allmulticast mode [ 357.352890][T18491] 8021q: adding VLAN 0 to HW filter on device bond3 [ 357.448667][T18498] netlink: 'syz.0.6066': attribute type 21 has an invalid length. [ 357.448697][T18498] IPv6: NLM_F_CREATE should be specified when creating new route [ 357.675231][T18515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6073'. [ 357.682670][T18513] bridge0: port 2(bond0) entered blocking state [ 357.682926][T18513] bridge0: port 2(bond0) entered disabled state [ 357.683244][T18513] bond0: entered allmulticast mode [ 357.698745][T18513] bond0: entered promiscuous mode [ 358.267839][T18543] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6083'. [ 358.376052][T18549] netlink: 904 bytes leftover after parsing attributes in process `syz.1.6087'. [ 358.376083][T18549] netlink: 904 bytes leftover after parsing attributes in process `syz.1.6087'. [ 358.938272][T18580] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6099'. [ 358.940649][T18580] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6099'. [ 358.981619][T18580] netlink: 1 bytes leftover after parsing attributes in process `syz.3.6099'. [ 359.582411][T18615] batadv1: entered promiscuous mode [ 359.582437][T18615] batadv1: entered allmulticast mode [ 359.732266][T18625] bond0: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 361.047925][T18699] netlink: 'syz.2.6149': attribute type 61 has an invalid length. [ 361.865241][T18745] netlink: 'syz.0.6174': attribute type 1 has an invalid length. [ 362.586407][T18783] x_tables: eb_tables: snat target: used from hooks PREROUTING, but only usable from POSTROUTING [ 363.312752][T18825] netlink: 'syz.0.6209': attribute type 11 has an invalid length. [ 363.443865][T18832] __nla_validate_parse: 15 callbacks suppressed [ 363.443951][T18832] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6210'. [ 363.443970][T18832] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6210'. [ 363.947012][T18858] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6223'. [ 364.441865][T18875] netlink: 80 bytes leftover after parsing attributes in process `syz.3.6232'. [ 364.441901][T18875] openvswitch: netlink: Missing key (keys=40, expected=100) [ 364.468445][T18879] netlink: zone id is out of range [ 364.468465][T18879] netlink: zone id is out of range [ 364.468473][T18879] netlink: zone id is out of range [ 364.468482][T18879] netlink: get zone limit has 4 unknown bytes [ 364.614357][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6235'. [ 364.619861][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6235'. [ 364.621386][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6235'. [ 364.621631][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6235'. [ 364.622682][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6235'. [ 364.622921][T18883] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6235'. [ 366.541413][T18973] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 366.594347][T18975] netlink: 'syz.3.6282': attribute type 8 has an invalid length. [ 367.695770][T19013] netlink: 'syz.0.6299': attribute type 34 has an invalid length. [ 368.586268][T19053] netlink: 'syz.4.6319': attribute type 1 has an invalid length. [ 368.586295][T19053] __nla_validate_parse: 87 callbacks suppressed [ 368.586309][T19053] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6319'. [ 368.622631][T19058] sit0: entered promiscuous mode [ 368.807448][T19058] netlink: 'syz.1.6322': attribute type 1 has an invalid length. [ 368.807485][T19058] netlink: 1 bytes leftover after parsing attributes in process `syz.1.6322'. [ 369.023794][T19078] netlink: 'syz.4.6329': attribute type 1 has an invalid length. [ 369.620762][T19115] netdevsim netdevsim3: Firmware load for './file0/file0/..' refused, path contains '..' component [ 369.959610][T19131] netlink: 'syz.4.6356': attribute type 4 has an invalid length. [ 370.587775][T19167] netlink: 'syz.4.6375': attribute type 1 has an invalid length. [ 370.587800][T19167] netlink: 'syz.4.6375': attribute type 2 has an invalid length. [ 370.674154][T19162] bond3: option arp_all_targets: invalid value (3) [ 370.708181][T19162] bond3 (unregistering): Released all slaves [ 371.057234][T19187] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6384'. [ 371.057290][T19187] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6384'. [ 371.101502][T19189] netlink: 60 bytes leftover after parsing attributes in process `syz.4.6386'. [ 371.101533][T19189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6386'. [ 371.101549][T19189] netlink: 20 bytes leftover after parsing attributes in process `syz.4.6386'. [ 371.467030][T19213] xt_l2tp: wrong L2TP version: 0 [ 372.143165][T19245] –: renamed from virt_wifi0 (while UP) [ 372.197633][T19247] netlink: 'syz.2.6413': attribute type 2 has an invalid length. [ 372.197661][T19247] netlink: 'syz.2.6413': attribute type 2 has an invalid length. [ 372.299462][T19252] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6416'. [ 372.742894][T19271] netlink: 'syz.0.6426': attribute type 29 has an invalid length. [ 372.786971][T19276] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6427'. [ 372.787051][T19276] netlink: 336 bytes leftover after parsing attributes in process `syz.2.6427'. [ 373.207640][T19302] netlink: 'syz.4.6438': attribute type 1 has an invalid length. [ 373.524896][T19317] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 374.156703][T19358] openvswitch: netlink: Actions may not be safe on all matching packets [ 374.267808][T19361] validate_nla: 1 callbacks suppressed [ 374.269031][T19361] netlink: 'syz.4.6465': attribute type 7 has an invalid length. [ 374.269072][T19361] netlink: 'syz.4.6465': attribute type 8 has an invalid length. [ 374.333362][T19369] __nla_validate_parse: 1 callbacks suppressed [ 374.333386][T19369] netlink: 1047 bytes leftover after parsing attributes in process `syz.3.6469'. [ 374.333414][T19369] veth0_to_bond: default FDB implementation only supports local addresses [ 374.504357][T19377] netlink: 'syz.3.6472': attribute type 3 has an invalid length. [ 374.504383][T19377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6472'. [ 374.504414][T19377] netlink: 'syz.3.6472': attribute type 3 has an invalid length. [ 374.504427][T19377] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6472'. [ 374.505084][T19377] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6472'. [ 374.655264][T19383] netlink: 'syz.2.6478': attribute type 21 has an invalid length. [ 374.655292][T19383] netlink: 128 bytes leftover after parsing attributes in process `syz.2.6478'. [ 374.655374][T19383] netlink: 'syz.2.6478': attribute type 5 has an invalid length. [ 374.655388][T19383] netlink: 3 bytes leftover after parsing attributes in process `syz.2.6478'. [ 375.316350][T19411] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6490'. [ 375.363070][T19414] geneve1: entered promiscuous mode [ 376.265561][T19458] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6511'. [ 376.265592][T19458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6511'. [ 376.265608][T19458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6511'. [ 376.370291][T19463] netlink: 'syz.1.6515': attribute type 30 has an invalid length. [ 376.452156][T19468] netlink: 'syz.0.6516': attribute type 1 has an invalid length. [ 376.461537][T19463] bond3: option arp_missed_max: invalid value (0) [ 376.461561][T19463] bond3: option arp_missed_max: allowed values 1 - 255 [ 376.487047][T19463] bond3 (unregistering): Released all slaves [ 377.158338][T19503] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 377.495853][T19514] bond0: option miimon: invalid value (18446744073709551609) [ 377.495890][T19514] bond0: option miimon: allowed values 0 - 2147483647 [ 377.501775][T19514] bond0 (unregistering): Released all slaves [ 378.210409][T19550] netlink: ct family unspecified [ 378.288126][T19554] x_tables: unsorted underflow at hook 2 [ 378.979913][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.023588][T19601] openvswitch: netlink: Key type 31 is not supported [ 379.152338][T19608] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.164080][T19605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.290503][T19614] xt_hashlimit: overflow, try lower: 8/0 [ 379.460406][T19624] openvswitch: netlink: VXLAN extension 307 out of range max 1 [ 379.527870][T19596] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 379.561774][T19596] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 379.724008][T19617] __nla_validate_parse: 6 callbacks suppressed [ 379.724031][T19617] netlink: 516 bytes leftover after parsing attributes in process `syz.1.6589'. [ 379.758537][T19630] 8021q: adding VLAN 0 to HW filter on device bond5 [ 380.005729][T19643] netlink: 'syz.3.6602': attribute type 15 has an invalid length. [ 380.429581][T19664] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6612'. [ 380.429608][T19664] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6612'. [ 380.512966][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.574405][T19670] bridge_slave_0 (unregistering): left allmulticast mode [ 380.574439][T19670] bridge_slave_0 (unregistering): left promiscuous mode [ 380.574522][T19670] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.925657][T19691] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6626'. [ 381.137606][T19701] tc_dump_action: action bad kind [ 381.661443][T19728] xt_hashlimit: size too large, truncated to 1048576 [ 381.661630][T19728] xt_NFQUEUE: number of queues (65529) out of range (got 65536) [ 381.784694][T19736] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6651'. [ 382.010912][T19752] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.584043][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6671'. [ 382.584079][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6671'. [ 382.949760][T19809] netlink: 'syz.0.6685': attribute type 62 has an invalid length. [ 382.991151][T19811] netlink: 'syz.2.6684': attribute type 101 has an invalid length. [ 383.089971][T19815] netlink: 'syz.4.6690': attribute type 11 has an invalid length. [ 383.183306][T19821] openvswitch: netlink: Message has -1 unknown bytes. [ 383.300154][T19827] IPv6: NLM_F_REPLACE set, but no existing node found! [ 383.411519][T19833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6699'. [ 383.437103][T19837] netlink: 'syz.2.6697': attribute type 21 has an invalid length. [ 383.437127][T19837] netlink: 'syz.2.6697': attribute type 20 has an invalid length. [ 383.631823][T19847] x_tables: duplicate entry at hook 2 [ 383.863324][T19863] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6710'. [ 383.878459][T19862] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6711'. [ 383.939710][T19863] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 384.049008][ T5817] lo speed is unknown, defaulting to 1000 [ 384.049053][ T5817] syz0: Port: 1 Link DOWN [ 384.049165][ T5817] lo speed is unknown, defaulting to 1000 [ 384.052699][T19868] netlink: 'syz.2.6712': attribute type 29 has an invalid length. [ 384.651137][T19904] netlink: 'syz.3.6730': attribute type 1 has an invalid length. [ 384.743284][T19909] netlink: 'syz.1.6734': attribute type 17 has an invalid length. [ 384.743311][T19909] __nla_validate_parse: 21 callbacks suppressed [ 384.743323][T19909] netlink: 148 bytes leftover after parsing attributes in process `syz.1.6734'. [ 384.926025][T19916] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 385.462505][T19950] netlink: 'syz.3.6754': attribute type 16 has an invalid length. [ 385.462741][T19951] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6753'. [ 385.462764][T19951] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6753'. [ 385.462780][T19951] netlink: 'syz.4.6753': attribute type 5 has an invalid length. [ 385.462793][T19951] netlink: 43 bytes leftover after parsing attributes in process `syz.4.6753'. [ 385.696424][T19963] netlink: 'syz.0.6762': attribute type 1 has an invalid length. [ 385.696451][T19963] netlink: 244 bytes leftover after parsing attributes in process `syz.0.6762'. [ 388.329648][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6827'. [ 388.329686][T20097] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6827'. [ 388.413425][T20099] netlink: 'syz.4.6831': attribute type 28 has an invalid length. [ 388.413453][T20099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6831'. [ 388.490039][T20102] No such timeout policy "syz1" [ 388.878552][T20119] netlink: 'syz.0.6837': attribute type 12 has an invalid length. [ 389.213419][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6845'. [ 389.321601][T20142] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 389.384413][T20145] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6849'. [ 390.160357][T20180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6867'. [ 390.160389][T20180] netlink: 'syz.2.6867': attribute type 1 has an invalid length. [ 390.160405][T20180] netlink: 140 bytes leftover after parsing attributes in process `syz.2.6867'. [ 390.385588][T20191] veth0: mtu less than device minimum [ 390.729582][T20203] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.016036][T20221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6888'. [ 391.101386][T20225] netlink: 56 bytes leftover after parsing attributes in process `syz.1.6890'. [ 391.231673][T20231] netlink: 56 bytes leftover after parsing attributes in process `syz.0.6891'. [ 391.231705][T20231] netlink: 'syz.0.6891': attribute type 2 has an invalid length. [ 391.231720][T20231] netlink: 'syz.0.6891': attribute type 1 has an invalid length. [ 391.231735][T20231] netlink: 116 bytes leftover after parsing attributes in process `syz.0.6891'. [ 391.422777][T20242] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 391.600298][T20255] ip6t_hbh: Not strict - not implemented [ 391.774059][T20265] netlink: 'syz.4.6908': attribute type 1 has an invalid length. [ 391.774086][T20265] netlink: 32 bytes leftover after parsing attributes in process `syz.4.6908'. [ 391.847842][T20268] netlink: 'syz.1.6911': attribute type 2 has an invalid length. [ 391.906135][T20270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 392.114060][T20278] set match dimension is over the limit! [ 392.165071][T20283] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6919'. [ 392.165101][T20283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6919'. [ 392.165118][T20283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6919'. [ 392.993908][T20325] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 393.099975][T20333] netlink: 'syz.0.6938': attribute type 3 has an invalid length. [ 393.583852][T20365] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 393.854175][T20380] netlink: 'syz.2.6961': attribute type 21 has an invalid length. [ 393.854246][T20380] netlink: 'syz.2.6961': attribute type 4 has an invalid length. [ 393.907726][T20382] rxe_eth0 speed is unknown, defaulting to 1000 [ 394.533128][T20410] xt_CT: No such helper "snmp_trap" [ 394.873782][T20429] IPv6: Can't replace route, no match found [ 395.047758][T20433] netlink: 'syz.1.6986': attribute type 6 has an invalid length. [ 395.047795][T20433] netlink: 'syz.1.6986': attribute type 6 has an invalid length. [ 395.120638][T20440] netlink: 'syz.4.6990': attribute type 1 has an invalid length. [ 395.418644][T20454] __nla_validate_parse: 5 callbacks suppressed [ 395.418668][T20454] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6997'. [ 395.619702][T20469] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7004'. [ 395.936484][T20486] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7012'. [ 395.936512][T20486] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7012'. [ 395.936526][T20486] tc_dump_action: action bad kind [ 396.205358][T20503] openvswitch: netlink: Unknown key attributes 2 [ 397.273901][T20552] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7045'. [ 397.522425][T20568] netlink: 'syz.2.7053': attribute type 1 has an invalid length. [ 397.691017][T20576] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7057'. [ 398.043619][T20595] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7066'. [ 398.043645][T20595] netlink: 'syz.3.7066': attribute type 1 has an invalid length. [ 398.418810][T20619] netlink: 'syz.1.7077': attribute type 3 has an invalid length. [ 398.810414][T20641] team_slave_0: entered allmulticast mode [ 398.913391][T20644] netlink: 'syz.1.7090': attribute type 2 has an invalid length. [ 399.054305][T20652] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7093'. [ 399.132498][T20656] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7097'. [ 399.507135][T20670] geneve4: entered promiscuous mode [ 399.719830][T20678] netlink: 76 bytes leftover after parsing attributes in process `syz.4.7107'. [ 400.314554][T20706] x_tables: eb_tables: arpreply target: used from hooks OUTPUT, but only usable from PREROUTING [ 400.314917][T20713] netlink: ct family unspecified [ 400.998811][T20754] __nla_validate_parse: 2 callbacks suppressed [ 400.998835][T20754] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7144'. [ 401.666820][T20784] netlink: 'syz.1.7158': attribute type 1 has an invalid length. [ 401.702942][T20787] SET target dimension over the limit! [ 402.081288][T20812] netlink: 228 bytes leftover after parsing attributes in process `syz.0.7174'. [ 402.110450][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7173'. [ 402.110481][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7173'. [ 402.387267][T20827] Cannot find del_set index 4 as target [ 402.404227][T20829] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7181'. [ 402.788045][T20850] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7192'. [ 402.957639][T20859] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 403.467810][T20891] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7212'. [ 403.467939][T20891] netlink: 'syz.2.7212': attribute type 1 has an invalid length. [ 403.493243][T20893] netlink: 'syz.3.7213': attribute type 7 has an invalid length. [ 404.824828][T20968] netlink: 'syz.0.7249': attribute type 21 has an invalid length. [ 404.824897][T20968] netlink: 156 bytes leftover after parsing attributes in process `syz.0.7249'. [ 404.852301][T20922] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 404.860607][ T30] audit: type=1800 audit(1793696259.182:3): pid=20971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7252" name="blkio.bfq.time_recursive" dev="tmpfs" ino=7364 res=0 errno=-22 [ 404.866899][T20972] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7251'. [ 405.103417][T20986] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7258'. [ 405.104458][T20986] vlan0: entered promiscuous mode [ 405.313036][T20996] openvswitch: netlink: Invalid VLAN frame [ 405.414696][T20998] veth2: entered allmulticast mode [ 405.997988][T21026] netlink: 'syz.1.7278': attribute type 1 has an invalid length. [ 405.998022][T21026] nbd: couldn't find a device at index 767 [ 406.162047][T21031] xt_addrtype: ipv6 does not support BROADCAST matching [ 406.423216][T21040] __nla_validate_parse: 3 callbacks suppressed [ 406.423239][T21040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7285'. [ 406.937382][T21060] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7295'. [ 407.072005][T21064] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7297'. [ 407.991082][T21093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7309'. [ 408.239631][T21108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7317'. [ 408.807763][ T252] IPVS: starting estimator thread 0... [ 408.915813][T21143] IPVS: using max 25 ests per chain, 60000 per kthread [ 409.143226][T21164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7342'. [ 409.143270][T21164] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7342'. [ 409.143287][T21164] netlink: 'syz.2.7342': attribute type 1 has an invalid length. [ 409.215225][T21165] A link change request failed with some changes committed already. Interface 04±ÿ may have been left with an inconsistent configuration, please check. [ 409.366907][T21177] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7349'. [ 409.367271][T21175] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 409.809435][T21201] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7361'. [ 409.809466][T21201] netlink: 580 bytes leftover after parsing attributes in process `syz.3.7361'. [ 411.081836][T21270] netlink: 'syz.3.7394': attribute type 21 has an invalid length. [ 411.229286][T21278] netlink: 'syz.4.7399': attribute type 10 has an invalid length. [ 411.229395][T21278] dummy0: entered promiscuous mode [ 411.239493][T21278] bond0: (slave dummy0): Releasing backup interface [ 411.260271][T21281] netlink: 'syz.1.7400': attribute type 1 has an invalid length. [ 411.261467][T21278] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 411.896729][T21296] pimreg: entered allmulticast mode [ 411.952912][T21310] xt_l2tp: v2 sid > 0xffff: 33554432 [ 413.009750][T21353] netlink: 'syz.4.7431': attribute type 1 has an invalid length. [ 413.009776][T21353] __nla_validate_parse: 6 callbacks suppressed [ 413.009789][T21353] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7431'. [ 413.009807][T21353] nbd: must specify at least one socket [ 413.927524][T21395] bond2: peer notification delay (37) is not a multiple of miimon (100), value rounded to 0 ms [ 413.937587][T21395] bond2 (unregistering): Released all slaves [ 414.268905][T21417] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 414.721078][T21444] netlink: 'syz.4.7468': attribute type 49 has an invalid length. [ 414.935840][T21452] xt_LOG: level 128 >= 8 [ 415.022686][T21456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7473'. [ 415.413879][T21476] netlink: 1120 bytes leftover after parsing attributes in process `syz.1.7482'. [ 415.413911][T21476] netlink: 1120 bytes leftover after parsing attributes in process `syz.1.7482'. [ 415.666880][T21492] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7488'. [ 416.007209][T21513] ip6t_hbh: unknown flags AD [ 416.094651][T21516] IPv6: NLM_F_CREATE should be specified when creating new route [ 416.147267][T21520] netlink: 'syz.4.7503': attribute type 3 has an invalid length. [ 416.210850][T21522] netlink: 'syz.2.7504': attribute type 1 has an invalid length. [ 416.210880][T21522] netlink: 'syz.2.7504': attribute type 2 has an invalid length. [ 416.210896][T21522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7504'. [ 416.539677][T21535] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 417.162247][T21561] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7523'. [ 417.162279][T21561] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7523'. [ 417.457833][T21574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7529'. [ 417.459909][T21574] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7529'. [ 417.569651][T21578] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 418.631474][T21636] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 418.747811][T21642] xt_NFQUEUE: number of total queues is 0 [ 418.865728][T21648] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 418.960457][T21656] netlink: 'syz.0.7569': attribute type 30 has an invalid length. [ 419.333692][T21677] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7579'. [ 419.680865][T21696] netlink: 508 bytes leftover after parsing attributes in process `syz.0.7590'. [ 419.711806][T21699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7589'. [ 420.305900][T21734] x_tables: unsorted underflow at hook 2 [ 420.712267][T21757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7619'. [ 421.739786][T21816] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7648'. [ 422.048747][T21833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7655'. [ 422.112046][T21833] bond4: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 422.209451][T21840] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7659'. [ 422.355777][T21833] bond4 (unregistering): Released all slaves [ 422.998750][T21836] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 422.998895][T21868] xt_l2tp: missing protocol rule (udp|l2tpip) [ 423.100684][T21872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7676'. [ 423.206125][T21880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7680'. [ 423.206155][T21880] netlink: 11 bytes leftover after parsing attributes in process `syz.2.7680'. [ 424.002495][T21927] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 424.721896][T21970] netlink: 'syz.2.7724': attribute type 1 has an invalid length. [ 424.721923][T21970] __nla_validate_parse: 2 callbacks suppressed [ 424.721937][T21970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7724'. [ 425.190028][T21992] netlink: 'syz.2.7734': attribute type 39 has an invalid length. [ 426.172623][T22041] netlink: 56 bytes leftover after parsing attributes in process `syz.4.7754'. [ 426.299981][T22045] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7756'. [ 426.300009][T22045] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7756'. [ 426.300026][T22045] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7756'. [ 426.604860][T22065] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7765'. [ 426.616305][T22066] SET target dimension over the limit! [ 427.065265][T22089] netlink: 'syz.4.7776': attribute type 8 has an invalid length. [ 427.275841][T22100] openvswitch: netlink: Actions may not be safe on all matching packets [ 427.614087][T22118] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 427.767824][T22124] netlink: 'syz.1.7792': attribute type 70 has an invalid length. [ 427.919288][T22128] netlink: 'syz.2.7795': attribute type 21 has an invalid length. [ 427.919334][T22128] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7795'. [ 428.214388][T22136] netlink: 'syz.1.7799': attribute type 1 has an invalid length. [ 428.214416][T22136] netlink: 'syz.1.7799': attribute type 2 has an invalid length. [ 428.510335][T22143] A link change request failed with some changes committed already. Interface vlan1 may have been left with an inconsistent configuration, please check. [ 429.211839][T22181] netlink: 'syz.1.7817': attribute type 2 has an invalid length. [ 429.211865][T22181] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7817'. [ 429.212361][T22178] netlink: 'syz.2.7818': attribute type 2 has an invalid length. [ 429.212380][T22178] netlink: 224 bytes leftover after parsing attributes in process `syz.2.7818'. [ 429.661561][T22201] xt_CONNSECMARK: invalid mode: 0 [ 429.771518][T22206] netlink: 'syz.1.7826': attribute type 3 has an invalid length. [ 431.054711][T22262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7852'. [ 431.054787][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7852'. [ 431.054804][T22262] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7852'. [ 431.054972][T22262] netlink: 108 bytes leftover after parsing attributes in process `syz.0.7852'. [ 431.054989][T22262] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7852'. [ 431.603311][T22284] wg0 speed is unknown, defaulting to 1000 [ 431.801494][T22295] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.231836][T22311] bond6: option lp_interval: invalid value (0) [ 432.231864][T22311] bond6: option lp_interval: allowed values 1 - 2147483647 [ 432.460665][T22322] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7880'. [ 432.460692][T22322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7880'. [ 432.797981][T22311] bond6 (unregistering): Released all slaves [ 432.859710][T22328] netlink: 'syz.4.7883': attribute type 12 has an invalid length. [ 432.859740][T22328] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7883'. [ 433.026011][T22334] netdevsim netdevsim4 €Â: renamed from netdevsim0 (while UP) [ 433.148669][T22342] bond4: option resend_igmp: invalid value (2878) [ 433.148698][T22342] bond4: option resend_igmp: allowed values 0 - 255 [ 433.153860][T22342] bond4 (unregistering): Released all slaves [ 433.270450][T22347] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7892'. [ 433.349155][T22353] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7896'. [ 434.557272][T22421] netlink: 'syz.2.7930': attribute type 21 has an invalid length. [ 434.557387][T22421] netlink: 'syz.2.7930': attribute type 1 has an invalid length. [ 434.644096][T22428] netlink: 'syz.0.7931': attribute type 1 has an invalid length. [ 435.001553][T22448] bond0: (slave gretap0): Opening slave failed [ 435.449394][T22479] netlink: 'syz.1.7957': attribute type 1 has an invalid length. [ 435.449424][T22479] netlink: 'syz.1.7957': attribute type 8 has an invalid length. [ 435.594759][T22485] netlink: 'syz.4.7960': attribute type 21 has an invalid length. [ 435.825123][T22497] ieee802154 phy1 wpan1: encryption failed: -90 [ 436.875998][T22548] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 437.134452][T22552] __nla_validate_parse: 5 callbacks suppressed [ 437.134478][T22552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7992'. [ 437.134500][T22552] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7992'. [ 437.281197][T22559] netlink: 'syz.3.7995': attribute type 21 has an invalid length. [ 437.281226][T22559] netlink: 128 bytes leftover after parsing attributes in process `syz.3.7995'. [ 437.281280][T22559] netlink: 'syz.3.7995': attribute type 5 has an invalid length. [ 437.281294][T22559] netlink: 3 bytes leftover after parsing attributes in process `syz.3.7995'. [ 437.352829][T22561] netlink: 'syz.4.7996': attribute type 4 has an invalid length. [ 437.354175][T22563] netlink: 'syz.0.7997': attribute type 4 has an invalid length. [ 437.642687][T22578] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 437.747935][T22584] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8006'. [ 437.887125][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8011'. [ 437.915360][T22594] netlink: 'syz.3.8012': attribute type 3 has an invalid length. [ 437.915869][T22594] netlink: 'syz.3.8012': attribute type 3 has an invalid length. [ 437.915917][T22594] netlink: 'syz.3.8012': attribute type 3 has an invalid length. [ 438.318623][T22621] sit0: entered promiscuous mode [ 438.325879][T22621] netlink: 1 bytes leftover after parsing attributes in process `syz.4.8025'. [ 438.534726][T22632] IPv6: NLM_F_CREATE should be specified when creating new route [ 438.886616][T22654] §: renamed from erspan0 (while UP) [ 438.911612][T22654] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8039'. [ 438.911639][T22654] A link change request failed with some changes committed already. Interface § may have been left with an inconsistent configuration, please check. [ 439.047659][T22664] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8046'. [ 439.240899][T22672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8049'. [ 440.006247][T22722] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 440.081843][T22724] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 440.340289][T22741] Cannot find del_set index 4 as target [ 440.441020][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.550580][T22748] unsupported nlmsg_type 40 [ 441.021058][T22775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.472321][T22801] openvswitch: netlink: nsh attr 0 has unexpected len 94 expected 0 [ 441.486322][T22802] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.620793][T22811] openvswitch: netlink: Missing key (keys=40, expected=100) [ 441.932840][T22829] validate_nla: 44 callbacks suppressed [ 441.932866][T22829] netlink: 'syz.0.8127': attribute type 1 has an invalid length. [ 442.724703][T22878] xt_cluster: you have exceeded the maximum number of cluster nodes (134217732 > 32) [ 443.158753][T22903] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 443.158786][T22903] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 443.629798][T22932] __nla_validate_parse: 8 callbacks suppressed [ 443.629824][T22932] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8176'. [ 443.972960][T22951] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8187'. [ 443.973075][T22951] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 444.250098][T22965] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8193'. [ 444.448067][T22972] xt_socket: unknown flags 0x8 [ 444.564493][T22977] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8200'. [ 444.732380][T22990] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8208'. [ 444.732411][T22990] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8208'. [ 444.812935][T22994] netlink: 'syz.1.8207': attribute type 10 has an invalid length. [ 444.839397][T22996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8210'. [ 444.839432][T22996] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8210'. [ 444.913066][T23001] netlink: 'syz.0.8211': attribute type 1 has an invalid length. [ 444.913091][T23001] netlink: 244 bytes leftover after parsing attributes in process `syz.0.8211'. [ 445.343598][T23025] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8222'. [ 445.633779][T23044] netlink: 'syz.4.8233': attribute type 1 has an invalid length. [ 445.633806][T23044] netlink: 'syz.4.8233': attribute type 2 has an invalid length. [ 445.964697][T23060] xt_CT: You must specify a L4 protocol and not use inversions on it [ 446.642408][T23091] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 447.317507][T23119] xt_l2tp: invalid flags combination: 0 [ 447.529408][T23133] openvswitch: netlink: Port 536870913 exceeds max allowable 65535 [ 447.613943][T23138] x_tables: duplicate underflow at hook 3 [ 447.627138][T23135] netlink: 'syz.2.8278': attribute type 1 has an invalid length. [ 447.725744][T23143] : entered promiscuous mode [ 447.892792][T23150] xt_TPROXY: Can be used only with -p tcp or -p udp [ 448.425959][T23167] bond6: option resend_igmp: invalid value (2878) [ 448.425988][T23167] bond6: option resend_igmp: allowed values 0 - 255 [ 448.522422][T23167] bond6 (unregistering): Released all slaves [ 448.627761][T23184] x_tables: duplicate entry at hook 2 [ 448.729987][T23172] ip6tnl1: entered allmulticast mode [ 449.368566][T23209] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 450.397489][T23253] __nla_validate_parse: 4 callbacks suppressed [ 450.397513][T23253] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8336'. [ 450.397540][T23253] netlink: 'syz.1.8336': attribute type 8 has an invalid length. [ 450.450297][T23253] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 450.450324][T23253] bridge8: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 451.063165][T23270] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 451.232345][T23273] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8346'. [ 452.264049][T23315] SET target dimension over the limit! [ 452.857336][T23335] netlink: zone id is out of range [ 452.857363][T23335] netlink: del zone limit has 4 unknown bytes [ 452.945701][T23339] netlink: 'syz.1.8379': attribute type 21 has an invalid length. [ 452.945729][T23339] netlink: 128 bytes leftover after parsing attributes in process `syz.1.8379'. [ 452.945795][T23339] netlink: 'syz.1.8379': attribute type 4 has an invalid length. [ 452.945809][T23339] netlink: 'syz.1.8379': attribute type 3 has an invalid length. [ 452.945821][T23339] netlink: 3 bytes leftover after parsing attributes in process `syz.1.8379'. [ 453.065193][T23342] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 453.251255][T23344] bond3: option resend_igmp: invalid value (2878) [ 453.253463][T23344] bond3: option resend_igmp: allowed values 0 - 255 [ 453.283919][T23344] bond3 (unregistering): Released all slaves [ 454.844897][T23412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8415'. [ 454.923478][T23416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8416'. [ 455.126645][T23426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8418'. [ 455.504884][T23440] netlink: 'syz.3.8427': attribute type 2 has an invalid length. [ 455.657882][T23446] netlink: 'syz.4.8431': attribute type 10 has an invalid length. [ 455.657924][T23446] dummy0: left promiscuous mode [ 455.691948][T23446] team0: Port device dummy0 added [ 455.982400][T23457] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 456.324016][T23473] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8440'. [ 456.474401][T23478] team0: entered promiscuous mode [ 456.474481][T23478] team0: entered allmulticast mode [ 457.804411][T23523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8468'. [ 458.372307][T23533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.362599][T23557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.662517][T23567] xt_hashlimit: invalid rate [ 459.819011][T23577] netlink: 80 bytes leftover after parsing attributes in process `syz.3.8494'. [ 459.931344][T23570] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 459.950839][T23570] bond6 (unregistering): Released all slaves [ 461.089073][T23612] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8511'. [ 461.344675][T23620] netlink: 72 bytes leftover after parsing attributes in process `syz.1.8512'. [ 461.955679][T23639] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8524'. [ 462.483293][T23657] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8532'. [ 462.483330][T23657] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8532'. [ 462.780211][T23669] bond6: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 463.341523][T23669] bond6 (unregistering): Released all slaves [ 463.821420][T23694] x_tables: unsorted entry at hook 3 [ 463.953170][T23699] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 464.359497][T23715] xt_HMARK: proto mask must be zero with L3 mode [ 464.458700][T23722] xt_hashlimit: max too large, truncated to 1048576 [ 465.098754][T23743] ebt_among: dst integrity fail: 200 [ 465.574967][T23754] netlink: 'syz.1.8578': attribute type 4 has an invalid length. [ 466.887491][T23805] openvswitch: netlink: IP tunnel dst address not specified [ 466.894807][T23807] netlink: zone id is out of range [ 466.894825][T23807] netlink: zone id is out of range [ 466.992569][T23811] netlink: 'syz.1.8607': attribute type 89 has an invalid length. [ 467.779681][T23840] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 468.055889][T23851] netlink: 'syz.2.8627': attribute type 1 has an invalid length. [ 469.261949][T23886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8644'. [ 469.307237][T23889] netlink: 'syz.3.8643': attribute type 49 has an invalid length. [ 469.388086][T23893] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 469.501182][T23894] rdma_rxe: rxe_newlink: failed to add wg0 [ 469.579268][T23900] IPVS: stopping master sync thread 12473 ... [ 469.648925][T23902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.143117][T23921] netlink: 'syz.4.8661': attribute type 8 has an invalid length. [ 471.182251][T23963] netlink: 'syz.0.8682': attribute type 10 has an invalid length. [ 471.182279][T23963] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8682'. [ 471.182526][T23963] bridge0: port 2(team0) entered blocking state [ 471.182647][T23963] bridge0: port 2(team0) entered disabled state [ 471.182835][T23963] team0: entered allmulticast mode [ 471.250437][T23963] team0: entered promiscuous mode [ 471.744891][T23978] netlink: ct family unspecified [ 471.831956][T23981] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8691'. [ 471.855255][T23985] netlink: 'syz.0.8692': attribute type 4 has an invalid length. [ 471.855282][T23985] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8692'. [ 471.856177][T23985] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 473.394592][T24021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8711'. [ 473.429913][T24025] netlink: 'syz.1.8712': attribute type 3 has an invalid length. [ 473.476932][T24027] netlink: 148 bytes leftover after parsing attributes in process `syz.3.8713'. [ 473.659522][T24035] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8716'. [ 473.659557][T24035] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8716'. [ 473.863182][T24043] netlink: 'syz.3.8720': attribute type 23 has an invalid length. [ 474.088246][T24046] xt_TCPMSS: Only works on TCP SYN packets [ 474.354068][T24056] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 474.448433][T24052] bond2 (unregistering): Released all slaves [ 475.584763][T24090] netlink: 'syz.3.8743': attribute type 2 has an invalid length. [ 476.064151][T24102] bond6: option min_links: invalid value (18446744073709551612) [ 476.064182][T24102] bond6: option min_links: allowed values 0 - 2147483647 [ 476.150903][T24102] bond6 (unregistering): Released all slaves [ 477.086615][T24139] xt_CT: No such helper "netbios-ns" [ 477.269372][T24155] netlink: 'syz.0.8773': attribute type 10 has an invalid length. [ 477.759571][T24175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8783'. [ 477.766674][T24177] netlink: 'syz.4.8784': attribute type 362 has an invalid length. [ 477.933938][T24181] netlink: 'syz.3.8788': attribute type 2 has an invalid length. [ 478.969112][T24216] netlink: 132 bytes leftover after parsing attributes in process `syz.2.8803'. [ 479.347835][T24227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8808'. [ 479.647711][T24236] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8813'. [ 479.903315][T24249] netlink: 'syz.2.8819': attribute type 7 has an invalid length. [ 479.994387][T24255] netlink: 'syz.2.8823': attribute type 1 has an invalid length. [ 480.066684][T24256] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 480.859746][T24292] ebt_limit: overflow, try lower: 4294901760/65535 [ 481.053631][T24300] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8843'. [ 481.280054][T24313] ipt_REJECT: TCP_RESET invalid for non-tcp [ 481.440308][T24319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8853'. [ 481.463926][T24319] gre0: left promiscuous mode [ 481.594208][T24319] bridge0: port 1(00ªX¹¦Dö») entered blocking state [ 481.594355][T24319] bridge0: port 1(00ªX¹¦Dö») entered forwarding state [ 481.644311][T24319] sit0: left promiscuous mode [ 481.820884][T24319] hsr0: left promiscuous mode [ 481.825821][T24333] openvswitch: netlink: VXLAN extension 1 has unexpected len 16 expected 4 [ 482.142146][T24319] vlan1: left promiscuous mode [ 482.302098][T24319] 8021q: adding VLAN 0 to HW filter on device bond5 [ 482.343446][T24319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.369436][T24319] 8021q: adding VLAN 0 to HW filter on device bond6 [ 482.867530][T24354] netlink: ct family unspecified [ 483.179152][T24362] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8875'. [ 483.210495][ T5850] lo speed is unknown, defaulting to 1000 [ 483.210536][ T5850] syz0: Port: 1 Link ACTIVE [ 483.210613][ T5850] lo speed is unknown, defaulting to 1000 [ 483.319984][T23429] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.322434][ T252] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.322658][ T252] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.322857][ T252] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 483.447981][ T252] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 483.510858][T24370] netlink: 'syz.3.8878': attribute type 29 has an invalid length. [ 483.510885][T24370] netlink: 'syz.3.8878': attribute type 70 has an invalid length. [ 483.558869][T24368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8877'. [ 483.558903][T24368] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8877'. [ 483.558919][T24368] netlink: 'syz.4.8877': attribute type 1 has an invalid length. [ 483.962490][T24384] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 484.363615][T24396] bond2: option arp_interval: invalid value (18446744073709551615) [ 484.363646][T24396] bond2: option arp_interval: allowed values 0 - 2147483647 [ 484.386812][T24396] bond2 (unregistering): Released all slaves [ 484.665056][T24408] xt_ecn: cannot match TCP bits for non-tcp packets [ 484.939053][T24418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8900'. [ 485.165333][T24425] netlink: 'syz.0.8904': attribute type 19 has an invalid length. [ 485.639744][T24438] netlink: 'syz.4.8911': attribute type 3 has an invalid length. [ 485.639777][T24438] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8911'. [ 486.546685][T24461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8921'. [ 486.683205][T24464] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8924'. [ 486.746081][T24469] openvswitch: netlink: Missing valid actions attribute. [ 486.746121][T24469] openvswitch: netlink: Actions may not be safe on all matching packets [ 487.461243][T24496] netlink: 3568 bytes leftover after parsing attributes in process `syz.0.8940'. [ 487.616178][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 488.044452][T24519] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 488.283262][T24526] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 488.810996][T24553] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.8966'. [ 489.369506][T24564] bond7: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 489.403115][T24564] bond7 (unregistering): Released all slaves [ 489.639764][T24579] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8979'. [ 490.044006][T24595] xt_hashlimit: max too large, truncated to 1048576 [ 490.127768][T24601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8990'. [ 490.127896][T24601] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8990'. [ 490.310680][T24605] netlink: 'syz.2.8992': attribute type 2 has an invalid length. [ 490.420535][T24610] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8994'. [ 490.527986][T24614] netlink: 180 bytes leftover after parsing attributes in process `syz.0.8996'. [ 490.942531][T24631] netlink: 3136 bytes leftover after parsing attributes in process `syz.0.9005'. [ 491.372008][T24647] IPv6: NLM_F_CREATE should be specified when creating new route [ 491.372381][T24647] netlink: 6 bytes leftover after parsing attributes in process `syz.4.9011'. [ 491.474134][T24652] netlink: 3568 bytes leftover after parsing attributes in process `syz.1.9014'. [ 491.903653][T24667] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9020'. [ 492.140464][T24676] netlink: 'syz.2.9026': attribute type 12 has an invalid length. [ 493.052522][T24712] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 493.759678][T24736] xt_esp: unknown flags DD [ 493.937232][T24741] __nla_validate_parse: 2 callbacks suppressed [ 493.937259][T24741] netlink: 176 bytes leftover after parsing attributes in process `syz.4.9056'. [ 494.997193][T24782] netlink: 'syz.0.9073': attribute type 7 has an invalid length. [ 495.051236][T24786] xt_hashlimit: overflow, try lower: 18446744073709551615/8388608 [ 495.210326][T24794] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 495.924106][T24812] SET target dimension over the limit! [ 496.095791][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 496.943606][T24843] smc: removing ib device rxe0 [ 497.221348][T24843] smbdirect: ib_dev[rxe0] removed [ 498.573036][T24874] tipc: Can't bind to reserved service type 1 [ 498.921308][T24880] netlink: 'syz.1.9118': attribute type 10 has an invalid length. [ 498.934918][T24880] team0: left promiscuous mode [ 498.935159][T24880] team0: left allmulticast mode [ 499.058476][T24880] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.109819][T24884] netlink: 'syz.0.9120': attribute type 1 has an invalid length. [ 499.175841][T24880] bond0: (slave team0): Enslaving as an active interface with an up link [ 501.471438][T24942] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.861308][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.051154][T24972] netlink: 'syz.1.9158': attribute type 10 has an invalid length. [ 502.051244][T24972] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 502.204305][T24975] netlink: 'syz.2.9160': attribute type 1 has an invalid length. [ 502.481902][T24986] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 502.871903][T25006] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9173'. [ 502.992413][T25010] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9177'. [ 503.101540][T25014] netlink: 'syz.2.9181': attribute type 1 has an invalid length. [ 503.169373][T25016] dummy0: mtu less than device minimum [ 504.033224][T25049] netlink: 'syz.1.9194': attribute type 2 has an invalid length. [ 504.033250][T25049] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9194'. [ 504.182645][T25054] netlink: 60 bytes leftover after parsing attributes in process `syz.2.9197'. [ 505.023572][T25082] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9213'. [ 505.333107][T25101] netlink: 'syz.0.9218': attribute type 8 has an invalid length. [ 506.128951][T25126] IPVS: Scheduler module ip_vs_mh not found [ 506.868402][T25156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9244'. [ 506.941034][T25162] netlink: 'syz.0.9248': attribute type 63 has an invalid length. [ 506.941062][T25162] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9248'. [ 506.952625][T25158] netlink: 'syz.1.9245': attribute type 1 has an invalid length. [ 506.952648][T25158] netlink: 'syz.1.9245': attribute type 2 has an invalid length. [ 507.077629][T25164] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9246'. [ 508.038097][T25207] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9269'. [ 508.274240][T25219] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 508.274268][T25219] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 508.707082][T25234] bond5: entered promiscuous mode [ 508.711027][T25234] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.846896][T25239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9284'. [ 508.846934][T25239] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9284'. [ 508.860500][T25242] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9286'. [ 508.999661][T25243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9285'. [ 509.167010][T25243] bond3: up delay (10) is not a multiple of miimon (7), value rounded to 7 ms [ 509.304678][T25243] bond3 (unregistering): Released all slaves [ 509.512669][T25255] bond2: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 509.512701][T25255] bond2: peer notification delay (6) is not a multiple of miimon (100), value rounded to 0 ms [ 509.516255][T25255] bond2: entered allmulticast mode [ 509.518014][T25255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 510.121611][T25274] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 510.979596][T25309] netlink: 'syz.2.9317': attribute type 1 has an invalid length. [ 511.390499][T25324] netlink: 136 bytes leftover after parsing attributes in process `syz.4.9323'. [ 511.589839][T25331] netlink: 'syz.3.9327': attribute type 2 has an invalid length. [ 512.096290][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 512.165799][T25355] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9338'. [ 512.197238][T25356] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9339'. [ 512.482185][T25363] netlink: 'syz.1.9342': attribute type 3 has an invalid length. [ 512.482210][T25363] netlink: 3 bytes leftover after parsing attributes in process `syz.1.9342'. [ 512.556776][T25364] bridge6: entered allmulticast mode [ 513.575348][T25395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9358'. [ 513.651595][T25395] sit0: left promiscuous mode [ 514.110666][T25395] vlan0: left promiscuous mode [ 514.129461][T25395] macsec0: left promiscuous mode [ 514.150396][T25395] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 514.211544][T25395] A link change request failed with some changes committed already. Interface ..ãc¤± may have been left with an inconsistent configuration, please check. [ 514.254059][T25413] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9367'. [ 514.254238][T25413] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9367'. [ 514.403338][T25418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9369'. [ 514.860996][T25435] netlink: 'syz.2.9377': attribute type 1 has an invalid length. [ 515.566774][T25462] xt_cgroup: invalid path, errno=-2 [ 515.842159][T25468] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9394'. [ 516.771018][T25494] ip6tnl7: entered promiscuous mode [ 516.771260][T25494] ip6tnl7: entered allmulticast mode [ 517.185336][T25514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9416'. [ 517.352644][T25519] netlink: 100 bytes leftover after parsing attributes in process `syz.4.9418'. [ 517.373255][T25522] IPVS: set_ctl: invalid protocol: 163 0.0.0.0:20001 [ 517.451708][T25525] ip_tables: iptables: counters copy to user failed while replacing table [ 518.216671][T25558] netlink: 'syz.2.9439': attribute type 25 has an invalid length. [ 518.216698][T25558] netlink: 'syz.2.9439': attribute type 3 has an invalid length. [ 518.216712][T25558] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9439'. [ 518.915091][T25574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9446'. [ 518.928714][T25574] ip6tnl0: entered promiscuous mode [ 520.249020][T25625] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9469'. [ 520.309300][T25625] sit0: left promiscuous mode [ 520.373698][T25625] batadv_slave_1: left promiscuous mode [ 520.412960][T25625] macvtap0: left promiscuous mode [ 520.462772][T25625] ip6gre2: left promiscuous mode [ 520.477962][T25625] veth3: left promiscuous mode [ 520.489950][T25625] gre2: left promiscuous mode [ 520.569614][T25625] bond3: left promiscuous mode [ 520.584768][T25625] geneve4: left promiscuous mode [ 520.601526][T25625] 8021q: adding VLAN 0 to HW filter on device bond4 [ 520.652843][T25625] bond5: left promiscuous mode [ 522.221210][T25697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9505'. [ 522.221250][T25697] netlink: 'syz.3.9505': attribute type 1 has an invalid length. [ 522.221265][T25697] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9505'. [ 522.350422][T25699] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9507'. [ 522.350450][T25699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9507'. [ 522.715240][T25716] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9512'. [ 522.825118][T25721] netlink: 'syz.3.9516': attribute type 21 has an invalid length. [ 522.926629][T25721] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9516'. [ 522.926678][T25721] netlink: 'syz.3.9516': attribute type 1 has an invalid length. [ 522.927875][ T251] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 522.927922][ T251] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 522.927957][ T251] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 522.927990][ T251] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 523.875266][T25763] siw: device registration error -23 [ 524.150906][T25776] netlink: 'syz.2.9543': attribute type 1 has an invalid length. [ 524.150934][T25776] netlink: 224 bytes leftover after parsing attributes in process `syz.2.9543'. [ 524.150952][T25776] NCSI netlink: No device for ifindex 0 [ 524.550699][T25789] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 524.664219][T25796] netlink: 'syz.1.9552': attribute type 5 has an invalid length. [ 525.446661][T25822] Cannot find add_set index 0 as target [ 525.887281][T25838] netlink: 'syz.4.9573': attribute type 21 has an invalid length. [ 526.160636][T25843] bridge4: entered allmulticast mode [ 526.425069][T25854] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 526.436828][T25855] netlink: 'syz.1.9581': attribute type 4 has an invalid length. [ 526.436852][T25855] netlink: 5620 bytes leftover after parsing attributes in process `syz.1.9581'. [ 526.527016][T25860] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 526.614735][T25859] gre3: entered promiscuous mode [ 527.105854][T25876] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 527.114254][T25876] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 527.722283][T25897] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9602'. [ 527.784756][T25899] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9604'. [ 527.784788][T25899] netlink: 'syz.3.9604': attribute type 1 has an invalid length. [ 528.452906][T25925] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9617'. [ 529.400478][T25956] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9629'. [ 529.531971][T25956] hsr_slave_0 (unregistering): left promiscuous mode [ 530.461676][T25989] geneve4: entered promiscuous mode [ 530.461702][T25989] geneve4: entered allmulticast mode [ 531.021994][T26007] netlink: 'syz.4.9655': attribute type 5 has an invalid length. [ 531.235662][T26016] netlink: 'syz.1.9659': attribute type 1 has an invalid length. [ 531.576417][T26030] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9667'. [ 531.602561][T26029] veth4: entered allmulticast mode [ 531.915187][T26044] netlink: 'syz.3.9675': attribute type 3 has an invalid length. [ 531.915212][T26044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9675'. [ 532.071009][T26046] bond3: option packets_per_slave: invalid value (134217728) [ 532.071035][T26046] bond3: option packets_per_slave: allowed values 0 - 65535 [ 532.194498][T26046] bond3 (unregistering): Released all slaves [ 532.445720][T26061] netlink: 'syz.3.9683': attribute type 1 has an invalid length. [ 532.753156][T26072] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9689'. [ 532.874430][T26077] netlink: 'syz.0.9690': attribute type 21 has an invalid length. [ 532.874456][T26077] netlink: 128 bytes leftover after parsing attributes in process `syz.0.9690'. [ 532.874507][T26077] netlink: 'syz.0.9690': attribute type 4 has an invalid length. [ 532.874521][T26077] netlink: 'syz.0.9690': attribute type 5 has an invalid length. [ 532.874533][T26077] netlink: 3 bytes leftover after parsing attributes in process `syz.0.9690'. [ 532.963806][T26081] bond4: option all_slaves_active: invalid value (255) [ 532.978042][T26081] bond4 (unregistering): Released all slaves [ 533.279795][T26092] ip6tnl2: entered allmulticast mode [ 533.464848][T26099] netlink: 'syz.1.9700': attribute type 1 has an invalid length. [ 533.464875][T26099] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9700'. [ 533.782968][T26110] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 534.178442][ T3409] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 534.178714][ T3409] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 534.207476][ T5817] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 534.275746][ T2253] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 534.284414][T26127] TCP: TCP_TX_DELAY enabled [ 534.758515][ T2253] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 535.186131][T26162] xt_REDIRECT: bad rangesize 26624. [ 535.746865][T26186] netlink: zone id is out of range [ 535.746883][T26186] netlink: set zone limit has 4 unknown bytes [ 536.065875][T26201] ±ÿ†ˆ¬hËdtÍ: renamed from lo (while UP) [ 536.149349][T26206] tipc: Started in network mode [ 536.149383][T26206] tipc: Node identity 00000000000000000300000000000001, cluster identity 4711 [ 536.149458][T26206] tipc: Enabling of bearer rejected, failed to enable media [ 536.780200][T26230] Bluetooth: MGMT ver 1.23 [ 537.532189][T26258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9777'. [ 537.532794][T26258] Zero length message leads to an empty skb [ 537.956728][T26273] netlink: 136 bytes leftover after parsing attributes in process `syz.0.9785'. [ 538.095767][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 539.165840][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.165889][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.165921][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.165953][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.624758][T26341] netlink: 1 bytes leftover after parsing attributes in process `syz.3.9819'. [ 539.951621][T26354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9826'. [ 541.367045][T26398] žÿ: renamed from team_slave_1 (while UP) [ 541.829317][T26410] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9853'. [ 542.046922][T26416] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9854'. [ 543.494545][T26474] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9885'. [ 544.100973][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 544.917733][T26493] macsec1: entered promiscuous mode [ 544.917761][T26493] team0: entered promiscuous mode [ 544.917777][T26493] dummy0: entered promiscuous mode [ 544.967699][T26493] macsec1: entered allmulticast mode [ 544.967726][T26493] team0: entered allmulticast mode [ 544.967743][T26493] dummy0: entered allmulticast mode [ 545.000252][T26493] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 545.150307][T26493] team0: Device macsec1 is already an upper device of the team interface [ 545.371595][T26499] IPv6: NLM_F_REPLACE set, but no existing node found! [ 545.691377][T26493] team0: left allmulticast mode [ 545.691406][T26493] dummy0: left allmulticast mode [ 545.725325][T26493] team0: left promiscuous mode [ 546.018786][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 546.766627][T26512] Bluetooth: hci0: unsupported parameter 5135 [ 546.766656][T26512] Bluetooth: hci0: unsupported parameter 8192 [ 546.766670][T26512] Bluetooth: hci0: unsupported parameter 5135 [ 546.766683][T26512] Bluetooth: hci0: unsupported parameter 8192 [ 549.587610][ T5777] dummy0: left promiscuous mode [ 550.724293][ C0] sched: DL replenish lagged too much [ 560.738820][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 563.839310][T26571] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9926'. [ 575.524842][T26629] Bluetooth: hci0: unsupported parameter 5135 [ 575.524881][T26629] Bluetooth: hci0: unsupported parameter 8192 [ 575.524895][T26629] Bluetooth: hci0: unsupported parameter 5135 [ 575.524908][T26629] Bluetooth: hci0: unsupported parameter 8192 [ 575.922497][T26640] sctp: [Deprecated]: syz.4.9951 (pid 26640) Use of int in max_burst socket option. [ 575.922497][T26640] Use struct sctp_assoc_value instead [ 578.117194][T26673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9961'. [ 578.117222][T26673] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9961'. [ 578.477829][T26682] Bluetooth: hci0: invalid length 0, exp 2 for type 3 [ 578.661735][T26686] netlink: 'syz.0.9965': attribute type 1 has an invalid length. [ 578.661764][T26686] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9965'. [ 578.661805][T26686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9965'. [ 587.264381][T26751] syz.0.9982 (26751) used obsolete PPPIOCDETACH ioctl [ 587.383141][T26757] netlink: 'syz.1.9985': attribute type 12 has an invalid length. [ 587.383170][T26757] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.9985'. [ 587.606474][T26760] vlan2: entered promiscuous mode [ 587.606499][T26760] macvlan0: entered promiscuous mode [ 588.898207][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 588.993461][ T30] audit: type=1804 audit(1793696443.312:4): pid=26793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.9995" name="/newroot/1967/cgroup.controllers" dev="tmpfs" ino=9863 res=1 errno=0 [ 589.033503][ T30] audit: type=1800 audit(1793696443.352:5): pid=26793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.9995" name="cgroup.controllers" dev="tmpfs" ino=9863 res=0 errno=-22 [ 591.381084][T26851] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10017'. [ 591.540709][ T5641] Bluetooth: hci4: connection err: -111 [ 594.348709][T26902] netlink: 17 bytes leftover after parsing attributes in process `syz.4.10036'. [ 594.674715][T26905] netlink: 'syz.0.10038': attribute type 4 has an invalid length. [ 594.674944][T26905] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10038'. [ 595.390034][T26913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10041'. [ 595.692024][T26920] netlink: 104 bytes leftover after parsing attributes in process `syz.4.10043'. [ 596.025114][T26926] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 609.389758][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 609.513066][T26975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10061'. [ 612.326853][ T252] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.326911][ T252] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.326950][ T252] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.367327][ T252] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 613.058009][T27016] block nbd0: not configured, cannot reconfigure [ 614.614430][T27055] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10097'. [ 616.273865][T27070] netlink: 'syz.4.10105': attribute type 13 has an invalid length. [ 621.305383][T27100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10115'. [ 621.305427][T27100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10115'. [ 628.910464][T27143] ip6gre3: entered promiscuous mode [ 628.910489][T27143] ip6gre3: entered allmulticast mode [ 629.245229][T27147] ip_tables: iptables: counters copy to user failed while replacing table [ 630.232275][T27166] ipvlan2: entered promiscuous mode [ 630.249452][T27166] bridge0: port 2(ipvlan2) entered blocking state [ 630.252260][T27166] bridge0: port 2(ipvlan2) entered disabled state [ 630.252470][T27166] ipvlan2: entered allmulticast mode [ 630.252488][T27166] bridge0: entered allmulticast mode [ 630.296783][T27166] ipvlan2: left allmulticast mode [ 630.296810][T27166] bridge0: left allmulticast mode [ 630.445233][T27168] raw_sendmsg: syz.3.10146 forgot to set AF_INET. Fix it! [ 632.152086][T27210] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 632.893804][T27227] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10173'. [ 633.551711][T27243] Bluetooth: MGMT ver 1.23 [ 634.834484][T27266] nbd: must specify a size in bytes for the device [ 634.878947][T27267] IPv6: sit1: Disabled Multicast RS [ 637.012696][T27293] netlink: 'syz.3.10204': attribute type 30 has an invalid length. [ 637.193637][T27301] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 639.723785][T27355] tipc: MTU too low for tipc bearer [ 642.053475][T27408] netlink: 224 bytes leftover after parsing attributes in process `syz.1.10251'. [ 642.888044][T27431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10267'. [ 643.252238][T27441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10272'. [ 643.697217][ T5641] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 643.729908][T27451] Bluetooth: hci0: invalid length 0, exp 2 for type 4 [ 645.129467][T27485] vlan2: entered promiscuous mode [ 645.129495][T27485] macvlan0: entered promiscuous mode [ 645.215599][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 660.372824][T27597] netlink: 192 bytes leftover after parsing attributes in process `syz.2.10341'. [ 666.130399][T27613] wg0 speed is unknown, defaulting to 1000 [ 667.373465][T27632] netlink: 'syz.3.10355': attribute type 3 has an invalid length. [ 667.373494][T27632] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10355'. [ 673.037831][T27613] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 673.292375][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10362'. [ 673.320690][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10362'. [ 673.321488][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10362'. [ 673.324788][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10362'. [ 673.371938][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10362'. [ 673.418124][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10362'. [ 673.445573][T27651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10362'. [ 684.074241][T26695] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 684.102970][T26695] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 684.120414][T26695] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 684.169312][T26695] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 684.187521][T26695] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 686.378111][T26695] Bluetooth: hci5: command tx timeout [ 688.485809][T26695] Bluetooth: hci5: command tx timeout [ 690.556665][T26695] Bluetooth: hci5: command tx timeout [ 692.586301][T26695] Bluetooth: hci5: command tx timeout [ 697.554384][T27729] ip_tables: iptables: counters copy to user failed while replacing table [ 700.020281][T27689] rxe_eth0 speed is unknown, defaulting to 1000 [ 700.076787][T27689] rxe_eth0 speed is unknown, defaulting to 1000 [ 700.521007][T27689] rxe_eth0 speed is unknown, defaulting to 1000 [ 713.159763][T27773] macsec1: entered promiscuous mode [ 716.245239][T27689] infiniband rxe0: set active [ 716.245264][T27689] infiniband rxe0: added rxe_eth0 [ 716.513688][T27689] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 716.513730][T27689] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 716.513770][T27689] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 716.933576][T27689] RDS/IB: rxe0: added [ 716.933656][T27689] smc: adding ib device rxe0 with port count 1 [ 716.933699][T27689] smc: ib device rxe0 port 1 has no pnetid [ 717.409100][T27803] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10414'. [ 718.506366][ T5777] rxe_eth0 speed is unknown, defaulting to 1000 [ 718.508001][ T5774] rxe_eth0 speed is unknown, defaulting to 1000 [ 718.508589][T27689] rxe_eth0 speed is unknown, defaulting to 1000 [ 722.525245][T27689] rxe_eth0 speed is unknown, defaulting to 1000 [ 725.139598][T27839] xt_hashlimit: size too large, truncated to 1048576 [ 725.870631][T27689] rxe_eth0 speed is unknown, defaulting to 1000 [ 726.698206][T27863] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.962446][T27689] rxe_eth0 speed is unknown, defaulting to 1000 [ 729.295117][T27899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10455'. [ 729.580176][T27689] rxe_eth0 speed is unknown, defaulting to 1000 [ 730.180814][T27911] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10461'. [ 730.211685][T27909] tc_dump_action: action bad kind [ 731.035071][ T252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 731.035114][ T252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.035141][ T252] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 731.369278][T27926] netlink: 'syz.4.10468': attribute type 1 has an invalid length. [ 731.442814][T27689] wg0 speed is unknown, defaulting to 1000 [ 732.741611][T27689] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 733.273150][T27963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10485'. [ 733.273553][T27963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10485'. [ 733.610203][ T252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 733.610269][ T252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 733.610297][ T252] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 734.523200][T27689] rxe_eth0 speed is unknown, defaulting to 1000 [ 735.780512][T27689] bridge0: port 1(bridge_slave_0) entered blocking state [ 735.780720][T27689] bridge0: port 1(bridge_slave_0) entered disabled state [ 735.781033][T27689] bridge_slave_0: entered allmulticast mode [ 735.783135][T27689] bridge_slave_0: entered promiscuous mode [ 735.819733][T27689] bridge0: port 2(bridge_slave_1) entered blocking state [ 735.820177][T27689] bridge0: port 2(bridge_slave_1) entered disabled state [ 735.820344][T27689] bridge_slave_1: entered allmulticast mode [ 735.822544][T27689] bridge_slave_1: entered promiscuous mode [ 735.942042][T27689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 735.959881][T27689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 736.014130][T27689] team0: Port device team_slave_0 added [ 736.029859][T27689] team0: Port device team_slave_1 added [ 736.083793][T27689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 736.083815][T27689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.083842][T27689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 736.147430][T27689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 736.147452][T27689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.147482][T27689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 736.214381][T28001] netlink: 'syz.3.10499': attribute type 10 has an invalid length. [ 736.214763][T28002] netlink: 'syz.3.10499': attribute type 10 has an invalid length. [ 736.368992][T27689] hsr_slave_0: entered promiscuous mode [ 736.370550][T27689] hsr_slave_1: entered promiscuous mode [ 736.371628][T27689] debugfs: 'hsr0' already exists in 'hsr' [ 736.371650][T27689] Cannot create hsr debugfs directory [ 736.812712][T27689] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 736.829452][T27689] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 736.830957][T27689] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 736.858577][T27689] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 736.860014][T27689] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 736.894581][T27689] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 736.905193][T27689] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 736.930906][T27689] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 737.222963][ T252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 737.223007][ T252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 737.223034][ T252] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 737.373631][T27689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 737.376050][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 737.468142][T27689] 8021q: adding VLAN 0 to HW filter on device team0 [ 737.488288][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 737.488417][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 737.598306][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 737.598463][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.638816][T28034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10508'. [ 738.638918][T28034] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10508'. [ 739.523139][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 739.523837][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 739.540199][ T13] IPVS: starting estimator thread 0... [ 739.629881][T28052] IPVS: using max 26 ests per chain, 62400 per kthread [ 740.322779][T28064] Bluetooth: hci0: invalid length 0, exp 2 for type 13 [ 741.076955][T26695] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 741.099266][T26695] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 741.106098][T26695] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 741.216977][T26695] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 741.258202][T26695] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 741.283002][T28081] Bluetooth: hci0: unsupported parameter 5135 [ 741.283057][T28081] Bluetooth: hci0: unsupported parameter 8192 [ 741.283072][T28081] Bluetooth: hci0: unsupported parameter 5135 [ 741.283084][T28081] Bluetooth: hci0: unsupported parameter 8192 [ 741.834120][T28089] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10529'. [ 741.977187][ T252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 741.977226][ T252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 741.977254][ T252] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 742.039429][T28092] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10530'. [ 742.039457][T28092] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10530'. [ 743.392262][T26695] Bluetooth: hci1: command tx timeout [ 745.514696][T26695] Bluetooth: hci1: command tx timeout [ 747.571724][T26695] Bluetooth: hci1: command tx timeout [ 747.792230][ T252] bridge_slave_1: left allmulticast mode [ 747.792284][ T252] bridge_slave_1: left promiscuous mode [ 747.793750][ T252] bridge0: port 2(bridge_slave_1) entered disabled state [ 747.809896][T28127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10542'. [ 747.823864][T28127] netlink: 48 bytes leftover after parsing attributes in process `syz.0.10542'. [ 749.616016][T26695] Bluetooth: hci1: command tx timeout [ 750.800993][ T252] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 750.847494][ T252] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 750.860718][ T252] .` (unregistering): Released all slaves [ 750.894665][ T252] bond1 (unregistering): Released all slaves [ 750.969443][ T252] bond0 (unregistering): Released all slaves [ 751.031056][ T252] bond2 (unregistering): Released all slaves [ 751.323990][ T5299] 8021q: adding VLAN 0 to HW filter on device eth2 [ 751.359634][T28174] bridge0: port 2(syz_tun) entered blocking state [ 751.359740][T28174] bridge0: port 2(syz_tun) entered disabled state [ 751.359902][T28174] syz_tun: entered allmulticast mode [ 751.433459][T28179] ip_tables: iptables: counters copy to user failed while replacing table [ 751.527083][T28174] syz_tun: entered promiscuous mode [ 751.529128][T28174] bridge0: port 2(syz_tun) entered blocking state [ 751.529294][T28174] bridge0: port 2(syz_tun) entered forwarding state [ 751.570210][ T252] tipc: Left network mode [ 751.834786][T28177] bridge0: port 3(ip6gretap0) entered blocking state [ 751.834895][T28177] bridge0: port 3(ip6gretap0) entered disabled state [ 751.835065][T28177] ip6gretap0: entered allmulticast mode [ 751.934178][T28177] ip6gretap0: entered promiscuous mode [ 751.942840][T28177] bridge0: port 3(ip6gretap0) entered blocking state [ 751.943039][T28177] bridge0: port 3(ip6gretap0) entered forwarding state [ 751.966678][T28075] wg0 speed is unknown, defaulting to 1000 [ 752.238442][T28191] netlink: 165 bytes leftover after parsing attributes in process `syz.0.10564'. [ 760.237435][T28075] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 760.539730][T28213] sctp: [Deprecated]: syz.4.10568 (pid 28213) Use of struct sctp_assoc_value in delayed_ack socket option. [ 760.539730][T28213] Use struct sctp_sack_info instead [ 767.808260][ T5299] 8021q: adding VLAN 0 to HW filter on device eth3 [ 768.584648][T28255] netlink: 6032 bytes leftover after parsing attributes in process `syz.1.10583'. [ 769.141391][T28258] batadv0: entered promiscuous mode [ 769.141991][T28258] macvtap0: entered promiscuous mode [ 769.195982][T28258] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 774.006378][T28258] batadv0: left promiscuous mode [ 776.756217][T28075] rxe_eth0 speed is unknown, defaulting to 1000 [ 777.036815][ T5299] 8021q: adding VLAN 0 to HW filter on device eth4 [ 782.424727][ T5299] 8021q: adding VLAN 0 to HW filter on device eth5 [ 783.263085][T28376] Bluetooth: MGMT ver 1.23 [ 783.309453][T28075] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.310452][T28075] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.310631][T28075] bridge_slave_0: entered allmulticast mode [ 783.466527][T28075] bridge_slave_0: entered promiscuous mode [ 783.480422][T28075] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.480690][T28075] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.483667][T28075] bridge_slave_1: entered allmulticast mode [ 783.645049][T28075] bridge_slave_1: entered promiscuous mode [ 784.064446][T28075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 784.353521][T28075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 784.558734][T28396] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 785.135082][T28075] team0: Port device team_slave_0 added [ 785.181907][T28075] team0: Port device team_slave_1 added [ 785.297022][ T5641] Bluetooth: hci4: command 0x0405 tx timeout [ 785.548741][ T252] hsr_slave_0: left promiscuous mode [ 785.554897][ T252] hsr_slave_1: left promiscuous mode [ 785.577207][ T252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 785.577263][ T252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 785.583876][ T252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 785.583901][ T252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 785.751628][ T252] veth0_macvtap: left promiscuous mode [ 785.752178][ T252] veth1_vlan: left promiscuous mode [ 785.752293][ T252] veth0_vlan: left promiscuous mode [ 785.843047][T28421] ip_tables: iptables: counters copy to user failed while replacing table [ 787.278909][ T252] team0 (unregistering): Port device team_slave_1 removed [ 787.329017][ T252] team0 (unregistering): Port device team_slave_0 removed [ 787.750627][T28408] IPVS: Error connecting to the multicast addr [ 787.755245][T28075] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 787.778416][T28075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.778451][T28075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.168915][T28075] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.168938][T28075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.168966][T28075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.129846][T28075] hsr_slave_0: entered promiscuous mode [ 789.137626][T28075] hsr_slave_1: entered promiscuous mode [ 789.153521][T28075] debugfs: 'hsr0' already exists in 'hsr' [ 789.153546][T28075] Cannot create hsr debugfs directory [ 790.950383][ T252] IPVS: stop unused estimator thread 0... [ 792.948051][T28521] ipvlan2: entered promiscuous mode [ 792.949023][T28521] bridge0: port 1(ipvlan2) entered blocking state [ 792.950998][T28521] bridge0: port 1(ipvlan2) entered disabled state [ 792.951164][T28521] ipvlan2: entered allmulticast mode [ 792.951181][T28521] bridge0: entered allmulticast mode [ 792.999271][T28521] ipvlan2: left allmulticast mode [ 792.999297][T28521] bridge0: left allmulticast mode [ 793.079349][T28522] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10671'. [ 793.667511][ T252] bridge_slave_1: left allmulticast mode [ 793.667542][ T252] bridge_slave_1: left promiscuous mode [ 793.667866][ T252] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.043698][ T252] bridge_slave_0: left allmulticast mode [ 794.043738][ T252] bridge_slave_0: left promiscuous mode [ 794.043989][ T252] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.101184][T28558] nbd: socks must be embedded in a SOCK_ITEM attr [ 795.944764][ T252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.059136][ T252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.080756][ T252] bond0 (unregistering): Released all slaves [ 797.062664][T28555] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 797.959809][T28555] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 798.099170][T28075] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 798.236814][T28075] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.237864][T28075] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 798.421603][T28075] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.442244][T28075] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 798.649903][T28075] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.678541][T28075] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 798.839172][T28075] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 799.044356][T28555] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.013370][T28635] ip_tables: iptables: counters copy to user failed while replacing table [ 801.028967][T28650] Bluetooth: MGMT ver 1.23 [ 801.368800][ T3409] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 801.790252][ T5641] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 801.794835][ T5641] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 801.817275][ T5641] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 801.842835][ T5641] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 801.844880][ T5641] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 801.947881][T28273] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.726634][T28273] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.726688][T28273] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 803.740109][ T252] hsr_slave_0: left promiscuous mode [ 803.811835][ T252] hsr_slave_1: left promiscuous mode [ 803.812939][ T252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 803.838552][ T252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.016526][ T5641] Bluetooth: hci5: command tx timeout [ 804.043949][T28697] netlink: 6145 bytes leftover after parsing attributes in process `syz.1.10722'. [ 804.044014][T28697] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 805.463140][T28724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10734'. [ 805.532441][ T252] team0 (unregistering): Port device team_slave_1 removed [ 805.621317][ T252] team0 (unregistering): Port device team_slave_0 removed [ 806.099020][ T5641] Bluetooth: hci5: command tx timeout [ 806.887488][T28738] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10737'. [ 807.408036][T28750] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10741'. [ 808.179689][ T5641] Bluetooth: hci5: command tx timeout [ 808.231231][T28655] wg0 speed is unknown, defaulting to 1000 [ 809.002390][T28769] netlink: 271 bytes leftover after parsing attributes in process `syz.3.10748'. [ 809.827936][T28655] ±ÿ†ˆ¬hËdtÍ speed is unknown, defaulting to 1000 [ 810.258096][ T5641] Bluetooth: hci5: command tx timeout [ 811.308369][T28813] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10764'. [ 811.674633][ T252] bridge_slave_1: left allmulticast mode [ 811.674665][ T252] bridge_slave_1: left promiscuous mode [ 811.674976][ T252] bridge0: port 2(bridge_slave_1) entered disabled state [ 811.728090][ T252] bridge_slave_0: left allmulticast mode [ 811.728122][ T252] bridge_slave_0: left promiscuous mode [ 811.728372][ T252] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.489094][ T252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 812.529216][ T252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 812.603822][ T252] bond0 (unregistering): Released all slaves [ 813.287325][T28853] netlink: 'syz.4.10778': attribute type 1 has an invalid length. [ 813.287362][T28853] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10778'. [ 813.287405][T28853] netlink: 'syz.4.10778': attribute type 1 has an invalid length. [ 814.181831][T28655] rxe_eth0 speed is unknown, defaulting to 1000 [ 814.869508][T28877] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10786'. [ 820.286534][ T252] hsr_slave_0: left promiscuous mode [ 820.293658][ T252] hsr_slave_1: left promiscuous mode [ 820.294816][ T252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 820.334178][ T252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 821.672113][ T252] team0 (unregistering): Port device team_slave_1 removed [ 821.745140][ T252] team0 (unregistering): Port device team_slave_0 removed [ 822.753085][T29009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10832'. [ 822.753114][T29009] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10832'. [ 822.857917][T29005] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10830'. [ 822.857954][T29005] netlink: 1 bytes leftover after parsing attributes in process `syz.1.10830'. [ 823.810598][T28655] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.810778][T28655] bridge0: port 1(bridge_slave_0) entered disabled state [ 823.810952][T28655] bridge_slave_0: entered allmulticast mode [ 823.847747][T28655] bridge_slave_0: entered promiscuous mode [ 823.886186][T29032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10841'. [ 823.886224][T29032] netlink: 'syz.1.10841': attribute type 10 has an invalid length. [ 823.886241][T29032] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10841'. [ 824.055130][T28655] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.065202][T28655] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.075090][T28655] bridge_slave_1: entered allmulticast mode [ 824.102100][T28655] bridge_slave_1: entered promiscuous mode [ 824.202884][T28655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 824.222524][T28655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 824.281503][T28655] team0: Port device team_slave_0 added [ 824.293245][T28655] team0: Port device team_slave_1 added [ 824.503037][T28655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 824.503059][T28655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.503089][T28655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 824.707598][T28655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 824.707619][T28655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 824.707648][T28655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 825.238753][T28655] hsr_slave_0: entered promiscuous mode [ 825.244016][T28655] hsr_slave_1: entered promiscuous mode [ 825.262206][T28655] debugfs: 'hsr0' already exists in 'hsr' [ 825.280849][T28655] Cannot create hsr debugfs directory [ 827.928793][T29089] macvtap1: entered promiscuous mode [ 827.928820][T29089] bridge0: entered promiscuous mode [ 828.192657][ T5299] 8021q: adding VLAN 0 to HW filter on device eth6 [ 835.062356][T29219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10903'. [ 835.198442][T29220] bond6: entered allmulticast mode [ 835.200800][T29220] 8021q: adding VLAN 0 to HW filter on device bond6 [ 838.043356][T29273] netlink: 'syz.3.10923': attribute type 32 has an invalid length. [ 838.043386][T29273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10923'. [ 838.170472][T29273] bond8: Setting coupled_control to off (0) [ 841.395203][T28655] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 841.744857][T28655] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 841.757912][T28655] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 842.219692][T28655] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 842.261549][T28655] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 842.313912][T28655] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 842.331794][T28655] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 842.396847][T28655] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 842.676270][T29350] netlink: 'syz.1.10943': attribute type 3 has an invalid length. [ 843.004732][T28655] 8021q: adding VLAN 0 to HW filter on device bond0 [ 843.101035][T28655] 8021q: adding VLAN 0 to HW filter on device team0 [ 843.141284][T28273] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.141419][T28273] bridge0: port 1(bridge_slave_0) entered forwarding state [ 843.203306][ T1177] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.203435][ T1177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 843.461554][T29362] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10947'. [ 843.499848][T28655] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 843.499875][T28655] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 843.918123][T29370] bridge_slave_0: entered promiscuous mode [ 846.749859][T29428] Bluetooth: hci0: unsupported parameter 5135 [ 846.749888][T29428] Bluetooth: hci0: unsupported parameter 8192 [ 846.749902][T29428] Bluetooth: hci0: unsupported parameter 5135 [ 846.749915][T29428] Bluetooth: hci0: unsupported parameter 8192 [ 846.874194][T29431] netlink: 'syz.3.10971': attribute type 1 has an invalid length. [ 847.302755][T28655] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.835162][T28655] veth0_vlan: entered promiscuous mode [ 848.883009][T28655] veth1_vlan: entered promiscuous mode [ 848.932186][T28655] veth0_macvtap: entered promiscuous mode [ 848.947588][T28655] veth1_macvtap: entered promiscuous mode [ 849.076962][T29470] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10979'. [ 849.076992][T29470] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10979'. [ 849.077018][T29470] netlink: 'syz.3.10979': attribute type 11 has an invalid length. [ 849.408439][T28655] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 849.452314][T28655] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 850.337127][T28265] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.349240][T28265] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.349315][T28265] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.349359][T28265] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.572881][T29497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10990'. [ 851.144410][T29505] netlink: 'syz.3.10993': attribute type 1 has an invalid length. [ 851.144460][T29505] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 851.197955][T28265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.197983][T28265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.678070][T27813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 851.678097][T27813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 851.970217][T29519] netlink: 277 bytes leftover after parsing attributes in process `syz.3.10996'. [ 854.391361][T29569] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11018'. [ 854.391396][T29569] nbd: socks must be embedded in a SOCK_ITEM attr [ 856.230982][T29605] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11034'. [ 856.318223][T29608] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 32, id = 0 [ 857.964410][T29644] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 858.217727][T29651] IPVS: ip_vs_add_dest(): tunnel port is zero [ 860.865114][T29703] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11072'. [ 860.865151][T29703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11072'. [ 861.000062][T29703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11072'. [ 862.240436][T29709] udevd[29709]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 862.269644][T29729] blkio.reset_stats is deprecated [ 862.320402][T29709] udevd[29709]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 863.641059][T29759] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11095'. [ 863.747912][ T30] audit: type=1804 audit(1793696718.072:6): pid=29761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.11096" name="/newroot/2294/cgroup.controllers" dev="tmpfs" ino=11502 res=1 errno=0 [ 863.747974][ T30] audit: type=1800 audit(1793696718.072:7): pid=29761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11096" name="cgroup.controllers" dev="tmpfs" ino=11502 res=0 errno=-22 [ 863.823263][ T30] audit: type=1800 audit(1793696718.142:8): pid=29761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.11096" name="cgroup.controllers" dev="tmpfs" ino=11502 res=0 errno=-22 [ 864.507962][T29773] veth0_to_bridge: entered promiscuous mode [ 864.508106][T29773] macsec1: entered allmulticast mode [ 864.508121][T29773] veth0_to_bridge: entered allmulticast mode [ 864.733327][T29773] veth0_to_bridge: left allmulticast mode [ 864.733362][T29773] veth0_to_bridge: left promiscuous mode [ 865.560669][T29797] 8021q: VLANs not supported on gre0 [ 865.849679][T29801] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11113'. [ 865.897081][T29803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11115'. [ 865.897114][T29803] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11115'. [ 866.031995][T29807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11116'. [ 866.550976][T29820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11120'. [ 866.650342][T29817] bond6 (unregistering): Released all slaves [ 868.929643][T29865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11141'. [ 868.929706][T29865] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11141'. [ 870.141997][T29888] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11151'. [ 870.946829][T29907] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11161'. [ 870.946875][T29907] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11161'. [ 871.651281][T29924] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11169'. [ 871.651379][T29924] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11169'. [ 873.302195][T29963] netlink: 260 bytes leftover after parsing attributes in process `syz.1.11186'. [ 874.010100][T29978] ip_tables: iptables: counters copy to user failed while replacing table [ 874.013358][T29978] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 895.097560][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 896.254292][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 897.310055][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 993.412221][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 999.577256][ T5641] Bluetooth: hci5: command 0x0406 tx timeout [ 1123.057817][ T1320] aoe: packet could not be sent on macvlan1. consider increasing tx_queue_len [ 1157.325122][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1157.332129][ C1] rcu: (detected by 1, t=10502 jiffies, g=126649, q=1500106 ncpus=2) [ 1157.340315][ C1] rcu: All QSes seen, last rcu_preempt kthread activity 2289 (4295052812-4295050523), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1157.353633][ C1] rcu: rcu_preempt kthread starved for 2290 jiffies! g126649 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1157.364770][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1157.374805][ C1] rcu: RCU grace-period kthread stack dump: [ 1157.380733][ C1] task:rcu_preempt state:R running task stack:27456 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1157.394285][ C1] Call Trace: [ 1157.397670][ C1] [ 1157.400663][ C1] __schedule+0x17dd/0x5830 [ 1157.405386][ C1] ? __lock_acquire+0x747/0x2de0 [ 1157.410485][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 1157.415659][ C1] ? __pfx___schedule+0x10/0x10 [ 1157.420568][ C1] ? lock_acquire+0x115/0x350 [ 1157.425304][ C1] ? schedule+0x90/0x2b0 [ 1157.429591][ C1] schedule+0x164/0x2b0 [ 1157.433790][ C1] schedule_timeout+0x152/0x2c0 [ 1157.438835][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1157.444262][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1157.449742][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1157.455601][ C1] ? prepare_to_swait_event+0x220/0x3e0 [ 1157.461206][ C1] ? prepare_to_swait_event+0x35e/0x3e0 [ 1157.466835][ C1] rcu_gp_fqs_loop+0x30c/0x1230 [ 1157.471775][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1157.477971][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1157.483303][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1157.488548][ C1] rcu_gp_kthread+0x9c/0x340 [ 1157.493196][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1157.498433][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1157.503446][ C1] ? __kthread_parkme+0x199/0x1f0 [ 1157.508941][ C1] kthread+0x38b/0x480 [ 1157.513059][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1157.518293][ C1] ? __pfx_kthread+0x10/0x10 [ 1157.522924][ C1] ret_from_fork+0x514/0xb70 [ 1157.527595][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1157.532756][ C1] ? __switch_to+0xc78/0x1410 [ 1157.537483][ C1] ? __pfx_kthread+0x10/0x10 [ 1157.542121][ C1] ret_from_fork_asm+0x1a/0x30 [ 1157.546991][ C1] [ 1157.550050][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1157.556656][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1157.561896][ C0] NMI backtrace for cpu 0 [ 1157.561914][ C0] CPU: 0 UID: 0 PID: 26695 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) [ 1157.561935][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 1157.561948][ C0] Workqueue: hci5 hci_cmd_sync_work [ 1157.562061][ C0] RIP: 0010:kasan_check_range+0x67/0x2c0 [ 1157.562125][ C0] Code: 00 ff 4c 39 cf 0f 82 14 02 00 00 49 89 ff 49 c1 ef 03 49 ba 00 00 00 00 00 fc ff df 4f 8d 1c 17 49 ff c8 4d 89 c1 49 c1 e9 03 <48> bb 01 00 00 00 00 fc ff df 4d 8d 34 19 4d 89 f4 4d 29 dc 49 83 [ 1157.562142][ C0] RSP: 0018:ffffc90000007240 EFLAGS: 00000a02 [ 1157.562179][ C0] RAX: ffff8880374df101 RBX: 0000000000000044 RCX: ffffffff89c476ae [ 1157.562193][ C0] RDX: 0000000000000001 RSI: 0000000000000044 RDI: ffff8880374df1c0 [ 1157.562205][ C0] RBP: 0000000000000000 R08: ffff8880374df203 R09: 1ffff11006e9be40 [ 1157.562217][ C0] R10: dffffc0000000000 R11: ffffed1006e9be38 R12: 0000000000000168 [ 1157.562230][ C0] R13: 00000000ffffffff R14: ffff8880374df1c0 R15: 1ffff11006e9be38 [ 1157.562243][ C0] FS: 0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 [ 1157.562259][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1157.562271][ C0] CR2: 00007fcf42aa7e3a CR3: 00000000657bc000 CR4: 00000000003526f0 [ 1157.562289][ C0] Call Trace: [ 1157.562296][ C0] [ 1157.562307][ C0] __asan_memset+0x22/0x50 [ 1157.562329][ C0] __alloc_skb+0x20e/0x7a0 [ 1157.562443][ C0] synproxy_send_client_synack+0x175/0xde0 [ 1157.562517][ C0] ? lock_acquire+0x115/0x350 [ 1157.562540][ C0] ? synproxy_pernet+0x45/0x270 [ 1157.562590][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1157.562611][ C0] ? nft_sock_get_eval_cgroupv2+0x240/0x280 [ 1157.562639][ C0] ? synproxy_pernet+0x45/0x270 [ 1157.562665][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 1157.562691][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1157.562716][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1157.562760][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 1157.562787][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1157.562819][ C0] nft_do_chain+0x48d/0x1b10 [ 1157.562869][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1157.562896][ C0] ? __pfx_ip_vs_fill_iph_skb_off+0x10/0x10 [ 1157.562991][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1157.563051][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1157.563079][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1157.563099][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1157.563130][ C0] nf_hook_slow+0xc5/0x220 [ 1157.563150][ C0] NF_HOOK+0x21f/0x3c0 [ 1157.563194][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1157.563218][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1157.563239][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1157.563264][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1157.563291][ C0] ? ip_local_deliver+0x113/0x190 [ 1157.563315][ C0] NF_HOOK+0x336/0x3c0 [ 1157.563339][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1157.563362][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1157.563384][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1157.563408][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1157.563430][ C0] ? ip_rcv_core+0x88d/0xd50 [ 1157.563456][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1157.563479][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1157.563502][ C0] process_backlog+0xa6b/0x18b0 [ 1157.563579][ C0] ? process_backlog+0x3de/0x18b0 [ 1157.563612][ C0] __napi_poll+0xaa/0x330 [ 1157.563638][ C0] net_rx_action+0x61d/0xf50 [ 1157.563670][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1157.563710][ C0] handle_softirqs+0x265/0x8d0 [ 1157.563748][ C0] __irq_exit_rcu+0xc6/0x220 [ 1157.563772][ C0] irq_exit_rcu+0x9/0x30 [ 1157.563794][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1157.563839][ C0] [ 1157.563845][ C0] [ 1157.563852][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1157.563894][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1157.563914][ C0] Code: f7 e8 4d 56 9f f5 f7 c3 00 02 00 00 74 05 e8 50 f7 cb f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 64 4a 90 f5 65 48 8b 05 ac a1 ba 08 48 85 c0 74 18 5b 41 5e c3 [ 1157.563930][ C0] RSP: 0018:ffffc90003b9f568 EFLAGS: 00000206 [ 1157.563945][ C0] RAX: 0000000000000006 RBX: 0000000000000246 RCX: 8000000000000001 [ 1157.563957][ C0] RDX: 0000000000000007 RSI: ffffffff8e6a2096 RDI: 0000000000000001 [ 1157.563969][ C0] RBP: ffffc90003b9f608 R08: ffffffff919d72bf R09: 1ffffffff233ae57 [ 1157.563983][ C0] R10: dffffc0000000000 R11: fffffbfff233ae58 R12: ffff88801e694d80 [ 1157.563996][ C0] R13: 0000000000000000 R14: ffff88801e694d80 R15: ffff888140415c80 [ 1157.564019][ C0] __slab_free+0x21d/0x2c0 [ 1157.564054][ C0] qlist_free_all+0x99/0x100 [ 1157.564076][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1157.564100][ C0] __kasan_kmalloc+0x22/0xb0 [ 1157.564132][ C0] __kmalloc_cache_noprof+0x31c/0x600 [ 1157.564153][ C0] ? __kmalloc_cache_noprof+0x148/0x600 [ 1157.564173][ C0] ? kobject_uevent_env+0x289/0x9e0 [ 1157.564242][ C0] ? kobject_uevent_env+0x289/0x9e0 [ 1157.564271][ C0] ? __pfx_dev_uevent_name+0x10/0x10 [ 1157.564410][ C0] kobject_uevent_env+0x289/0x9e0 [ 1157.564440][ C0] device_del+0x74d/0x8f0 [ 1157.564457][ C0] ? klist_iter_exit+0xc1/0x100 [ 1157.564484][ C0] ? __pfx_device_del+0x10/0x10 [ 1157.564506][ C0] device_unregister+0x21/0xf0 [ 1157.564525][ C0] hci_conn_del+0xc98/0x1290 [ 1157.564580][ C0] ? hci_abort_conn_sync+0xa42/0x1170 [ 1157.564618][ C0] hci_abort_conn_sync+0xda7/0x1170 [ 1157.564640][ C0] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1157.564660][ C0] ? abort_conn_sync+0x26/0x210 [ 1157.564704][ C0] ? abort_conn_sync+0x26/0x210 [ 1157.564722][ C0] ? abort_conn_sync+0x19c/0x210 [ 1157.564740][ C0] ? __pfx_abort_conn_sync+0x10/0x10 [ 1157.564761][ C0] hci_cmd_sync_work+0x280/0x430 [ 1157.564787][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1157.564814][ C0] process_scheduled_works+0xc3d/0x1630 [ 1157.564855][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1157.564885][ C0] ? assign_work+0x3cf/0x5d0 [ 1157.564913][ C0] worker_thread+0xa47/0xfb0 [ 1157.564946][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1157.564969][ C0] kthread+0x38b/0x480 [ 1157.564989][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1157.565014][ C0] ? __pfx_kthread+0x10/0x10 [ 1157.565034][ C0] ret_from_fork+0x514/0xb70 [ 1157.565057][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1157.565076][ C0] ? __switch_to+0xc78/0x1410 [ 1157.565111][ C0] ? __pfx_kthread+0x10/0x10 [ 1157.565131][ C0] ret_from_fork_asm+0x1a/0x30 [ 1157.565159][ C0]